[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Interspire ArticleLive 2005 (php version) is vulnerable to XSS
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Interspire ArticleLive 2005 (php version) is vulnerable to XSS
- From: mircia mircia <mircia@xxxxxxxxxxxxxxxxxx>
- Date: 23 Mar 2005 05:50:11 -0000
Can you please confirm my suggestion that:
Interspire ArticleLive 2005 (php version) is vulnerable to XSS:
e.g.
http://localhost/articles/newcomment?ArticleId="><script>alert('hi')</script>
// best wishes, mircia [mircia@xxxxxxxxxxxxxxxxxx]