Toms Gästebuch Multiple Cross-Site Scripting Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.

The following example URIs are available:

http://www.example.com/form.php?action=show&homepage=[XSS]&mail=[XSS]&name=[XSS]
http://www.example.com/admin/header.php?language=[XSS]&anzeigebreite=[XSS]
http://www.example.com/install.php?msg=[XSS]


 

Privacy Statement
Copyright 2010, SecurityFocus