blur6ex 0.3 Comment title HTML inyection vuln.

HeLiOsZ - Dark End Team - Internet Security Team

blur6ex 0.3 Comment title HTML inyection vuln.

IRC: darkend.sytes.net #darkend , http://darkend.sytes.net &

http://www.darkend.org

Rish : Medium

Type : web applet

Creator: http://www.blursoft.com

Exploit:

• To exploit this vuln you simply need an Internet Browser,write some
  name,some mail and in
  the Title space you can put your html injection.

Dork: "powered by blur6ex 0.3" or "powered by blur6ex"

FREE pop-up blocking with the new MSN Toolbar - get it now!
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/