• info
• discussion
• exploit
• solution
• references

Gattaca Server 2003 Cross-Site Scripting Vulnerability

No exploit is required.

The following proof of concept examples are available:
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=[code]//[code]
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=[code]//[code]&LANGUAGE=lang//en