Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Aria-Security Team] social-networkin SQL Injection

NuclearBB Alpha 2 Remote File Inclusion

Husrev Forums v2.0.1:PoWerBoard Sql

Proxy Anket v3.0.1 Sql injection Vulnerable

From:	cod3in_(at)_gmail.com <cod3in_(at)_gmail.com>
Date:	11.09.2007
Subject:	Toms Gstebuch 1.00 - XSS

Software: Guestbook
Title: Toms Gдstebuch 1.00
Version: 1.0
Type: XSS
Date: Sat Aug 11 21:52:08 CEST 2007
Vendor: Fitz Thomas
Page: http://www.toms-seiten.at/

vulnerability:
----------------------------
http://example.com/form.php?action=show&homepage=[XSS]&mail=[XSS]&nam
e=[XSS]
http://example.com/admin/header.php?language=[XSS]&anzeigebreite=[XSS]
http://example.com/install.php?msg=[XSS]

The vendor has been informed.