Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting

Author: Justin Hagstrom
type: webapps
platform: php
port: 
date_added: 2003-12-09 
date_updated: 2012-12-16 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9179/info

Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If such a link is visited by a victim user, the attacker-supplied code may render in their web browser in the context of the site.

This issue was reported in version 1.2.6. Other versions are also likely affected.

http://www.example.com/index.php?path=<script>alert(document.domain)</script>