• info
• discussion
• exploit
• solution
• references

Form Sender Processform.PHP3 Name Cross Site Scripting Vulnerability

A demonstration exploit URL is provided:

http://[target]/[path]/processform.php3?name=<script>alert(document.cookie)</script>