• info
• discussion
• exploit
• solution
• references

Xerver Multiple Input Validation Vulnerabilities

No exploit is required.

The following proof of concepts are available:
http://www.example.com/Test.pl. ( '.' )
http://www.example.com/Test.php%2e ( '%2e' )

http://www.example.com/%00/

http://www.example.com/%00/<script>alert('X.S.S')</script>