• info
• discussion
• exploit
• solution
• references

Scoop Multiple Cross-Site Scripting Vulnerabilities

No exploit is required.

Example URI sufficient to demonstrate these issues are available:
http://www.example.com/?op=search&offset=0&old_count=30&type=[XSS]
http://www.example.com/?op=search&offset=0&old_count=30&type=story&topic=&section=&string=r0t&count=1[XSS]
http://www.example.com/story/2005/11/4/184932/452[XSS]
http://www.example.com/story/2005/11/4/184932[XSS]
http://www.example.com/story/2005/11/4[XSS]
http://www.example.com/story/2005/11[XSS]
http://www.example.com/story/2005[XSS]
http://www.example.com/story/[XSS]