Wednesday, February 23, 2011

Non-Persistent in Tuugo Free company and business search engine

Title : Non-Persistent in Tuugo Free company and business search engine
Web : http://www.tuugo.com
Found by: p0pc0rn 23/2/2011

XSS
---
Tuugo Search Engine is Vulnerable Non Persistent XSS at parameter search=&nearto=

POC
---

http://site.com/CompaniesForProductByLoc?search=[XSS]&nearto=[XSS]
Share:

0 comments: