YaPiG thanks_comment.php Cross-Site Scripting Vulnerability

/*
Kuon <Armorize Security Team>

Kuon-[at]-Armorize.com

YaPiG thanks_comment.php Cross-Site Scripting Vulnerability

Contact : Kuon-[at]-Armorize.com

Link : www.Armorize.com

*/

Armorize Technologies Security Advisory

Advisory No: 20061001
Date: 2006/08/25

Affected Software:
yapig 0.95b

Vulnerability Description:
Cross-Site Scripting Vulnerability

Detection/Exploit:
http://www.example.com/[PATH]/template/default/thanks_comment.php?D_REFRESH_URL=[XSS]

Disclosure Timeline:
2006/08/17

Armorize Technologies provides next-generation source code analysis tools to help developers identify and remediate vulnerabilities in their web application source. CodeSecure™, Armorize’s premier source code analysis tool is available for analysis of PHP, JSP and ASP. Find out more at www.armorize.com .