OpenBB Member.PHP Cross-Site Scripting Vulnerability

No exploit is required.

The following proof of concept URI is available:
http://www.example.com/member.php?action=list&page=2&sortorder=username&perpage=25&reverse="><script>alert('test');</script>


 

Privacy Statement
Copyright 2010, SecurityFocus