e107 Website System Log.PHP HTML Injection Vulnerability

There is no exploit required; however the following example is available:

http://www.example.com/e107_plugins/log/log.php?referer=code<br>goes<here>&color=24&eself=http://www.example.com/stats.php&res=1341X1341


 

Privacy Statement
Copyright 2010, SecurityFocus