YaPiG thanks_comment.php Cross-Site Scripting Vulnerability
/*
Kuon <Armorize Security Team>
Kuon-[at]-Armorize.com
YaPiG thanks_comment.php Cross-Site Scripting Vulnerability
Contact : Kuon-[at]-Armorize.com
Link : www.Armorize.com
*/
Armorize Technologies Security Advisory
Advisory No: 20061001
Date: 2006/08/25
Affected Software:
yapig 0.95b
Vulnerability Description:
Cross-Site Scripting Vulnerability
Detection/Exploit:
http://www.example.com/[PATH]/template/default/thanks_comment.php?D_REFRESH_URL=[XSS]
Disclosure Timeline:
2006/08/17
Armorize Technologies provides next-generation source code analysis tools to
help developers identify and remediate vulnerabilities in their web application
source. CodeSecure?, Armorize?s premier source code analysis tool is available
for analysis of PHP, JSP and ASP. Find out more at www.armorize.com .