AOH :: HP Unsorted W :: BX1273.HTM

w3-msql error page XSS



xss in w3-msql error page
xss in w3-msql error page



A reflected xss flaw exists in the w3-msql error page.

google dork : "W3-mSQL Error!  -  Can't stat script file (/"

Just insert a script from the start of /

like if u get a URL like:-

http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html

and the error page output as :-

W3-mSQL Error!  -  Can't stat script file (/journal/ijcd/index.html)

u can try this:-

A reflected xss flaw exists in the w3-msql error page.

google dork : "W3-mSQL Error!  -  Can't stat script file (/"

Just insert a script from the start of /

like if u get a URL like:-

http://localhost/cgi-bin/w3-msql/

to confirm the issue


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.