Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Blogs :: va1520.htm

FC2 BLOG Cross-Site Scripting Vulnerabilities



FC2 BLOG Cross-Site Scripting Vulnerabilities
FC2 BLOG Cross-Site Scripting Vulnerabilities



Subject: FC2 BLOG Cross-Site Scripting Vulnerabilities
Application: FC2 BLOG
Vendor:BLOG.FC2.COM
Corporation: FC2, Inc.
DATE : 9 Oct 2008
Description: FC2 BLOG Cross-Site Scripting Vulnerabilities

Vulnerability:
=============They do not properly sanitize the potentially malicious input content
to be rendered and, as a result, an attacker might provide malicious
HTML content as part of A New Entry.

Exploit:
=============Write A New Entry in FC2 blog:


=============xisigr[topsec]
xisigr@gmail.com 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH