mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 21:39:29 +02:00
855 B
855 B
CVE-2009-2890
Description
Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter.
POC
Reference
- http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt
- http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt