* a-forum xss

* By : sn0oPy

* Risk : medium

* Site : http://www.mistersp.com/

* Dork : inurl:"/a-forum/forum.php3"

* exploit :

just inject any script on the "sujet" or/and "psuedo".

* contact : sn0oPy (at) avenir-geopolitique (dot) net [email concealed]

* greetz : [subzero], Avg Team(http://forums.avenir-geopolitique.net).

[ reply ]