Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHPBBPLUS 1.5.3 RFI BUG

GCALDaemon Remote DoS

XSS on Obedit v3.03

Coppermine <= 1.4.12 Cross Site Scripting and Local File Inclusion

From:	malibu.r_(at)_hotmail.com <malibu.r_(at)_hotmail.com>
Date:	19.09.2007
Subject:	b1gmail Cross Site Scripting

b1gmail Cross Site Scripting
============================
Version: 6.3.1
site: http://www.b1gmail.de

Profile: Cross Site Scripting
Method: POST
location:hilfe.php
strings: "+onmouseover=alert(1898233298)+


http://site.com/hilfe.php?chapter="+onmouseover=alert(1898233298)+

credit`s: malibu.r