Cross-Site Scripting on your site (www.php.net)

From: Date: Thu, 02 May 2002 05:11:02 +0000
Subject: Cross-Site Scripting on your site (www.php.net)
Groups: php.mirrors 
Request: Send a blank email to php-mirrors+get-9981@lists.php.net to get a copy of this message
My name is 'office', an Internet user, (not a hacker). I have found the vulnerability of cross-site scripting on your site, so report it. You can recognize the vulnerability with the URL http://www.php.net/cal.php?id=76&cy="><script>alert("hello")</script> and that prove that any (malicious) script code is possible as PHP.net web page. If you want to know more about corss-site scripting, you can refer http://www.cert.org/advisories/CA-2000-02.html This vulnerability in your site and your reaction for this report will be published by me adequately. Thanks, -- office office@ukky.net http://www.office.ac/

« previous php.mirrors (#9981) next »