• info
• discussion
• exploit
• solution
• references

VBZoom Profile.PHP Cross-Site Scripting Vulnerability


This issue can be exploited through use of a web client.

An example has been provided:

http://www.example.com/vz/profile.php?UserID=1&UserName='>XSS