Mailbarrow index.php searchterms HTML Injection

2006-03-28T00:00:00
ID OSVDB:24599
Type osvdb
Reporter Preddy(lil.turk@email.com)
Modified 2006-03-28T00:00:00

Description

Manual Testing Notes

http://[target]/index.php?searchterms=%22%3E%3Ch1%3EXSS%3C/h1%3E&searchtype=0&age=0&length=0&author=&num_puppets=0&language=English&orderby=poprating&sortdirection=DESC&type=3&Go.x=52&Go.y=27&what=simplesearch

References:

Vendor URL: http://www.mailbarrow.com/ Other Advisory URL: http://osvdb.org/ref/24/24599-mailbarrow.txt