• info
• discussion
• exploit
• solution
• references

Ultimate Auction Item.PL Cross-Site Scripting Vulnerability

An exploit is not required.

An example URI sufficient to demonstrate this issue was provided:

http://www.example.com/item.pl?item=<script>alert("XSS")</script>