Toms Gstebuch 1.00 - XSS

From: <cod3in_at_gmail.com>
Date: 1 Sep 2007 12:27:29 -0000

('binary' encoding is not supported, stored as-is) Software: Guestbook
Title: Toms Gästebuch 1.00
Version: 1.0
Type: XSS
Date: Sat Aug 11 21:52:08 CEST 2007
Vendor: Fitz Thomas
Page: http://www.toms-seiten.at/

vulnerability:
----------------------------
http://example.com/form.php?action=show&homepage=[XSS]&mail=[XSS]&name=[XSS]
http://example.com/admin/header.php?language=[XSS]&anzeigebreite=[XSS]
http://example.com/install.php?msg=[XSS]

The vendor has been informed.
Received on Sep 01 2007