AzDGGuestbook

Product : AzDGGuestbook Version : 1.0.0 WebSite : http://www.azdg.com Problem : phpinfo Description: ------------ test.php =========== ?php phpinfo; ? =========== Exploit: -------- http://somehost/book/test.php...

OmniHTTPd test.php Cross-Site Scripting Issue

A vulnerability exists in the test.php script of OmniHTTPd. The script makes a classic coding error -- trusting unsanitized user input. The query string and cookie values are returned unfiltered. Of most concern, of course, is the query string:...