t)

thankyou, it's fixed. > -----Original Message----- > From: office [mailto:office@ukky.net] > Sent: Thursday, May 02, 2002 6:11 AM > To: webmaster@php.net > Cc: office@ukky.net > Subject: Cross-Site Scripting on your site?(www.php.net) > > > My name is 'office', an Internet user, (not a hacker). > > I have found the vulnerability of cross-site scripting on your site, > so report it. > > You can recognize the vulnerability with the URL > > http://www.php.net/cal.php?id=76&cy="><script>alert("hello")</script> > and that prove that any (malicious) script code is possible as > PHP.net web page. > > > If you want to know more about corss-site scripting, you can refer > http://www.cert.org/advisories/CA-2000-02.html > > This vulnerability in your site and your reaction for this report will > be published by me adequately. > > Thanks, > -- > office > office@ukky.net > http://www.office.ac/ >