MAXdev MD-Pro user.php op Variable XSS

2006-10-25T10:03:48
ID OSVDB:30040
Type osvdb
Reporter OSVDB
Modified 2006-10-25T10:03:48

Description

Manual Testing Notes

http://[target]/user.php?uname=1&module=NS- LostPassword&op=[code]

References:

Vendor Specific News/Changelog Entry: http://www.maxdev.com/Article608.phtml Secunia Advisory ID:22564 Related OSVDB ID: 30041 FrSIRT Advisory: ADV-2006-4195 CVE-2006-5564 Bugtraq ID: 20752