Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Full-disclosure] Teamspeak Server 2.0.20.1 Vulnerabilities

Multiple Denial of Service attacks possible for Webspeed OpenEdge

eFileCabinet Authentication Bypass

W1L3D4 Philboard v0.2 sql injection

From:	absamu_(at)_gmail.com <absamu_(at)_gmail.com>
Date:	12.05.2007
Subject:	fotolog xss

example:
http://www.fotolog.com/all_photos.html?user=[code]

http://www.fotolog.com/all_photos.html?user=%3Ch1%3EXSS%3C/h1%3E


bye