• info
• discussion
• exploit
• solution
• references

IBM Net.Data db2www Error Message Cross-Site Scripting Vulnerability

The following example was provided:

http://www.example.com/cgi-bin/db2www/<script>alert(document.domain)</script>/A