XSS in scriptat support InverseFlow Help Desk v2.31 :::::::::::::::::::::::::::::::::::::::::::::::::::::: Discovered : SwEET-DeViL & viP HaCkEr & HaCkEr sUn Name scriptat: InverseFlow Help Desk v2.31 tame : AL-garnei K-S-A :::::::::::::::::::::::::::::::::::::::::::::::::::::: #################################################################### [1] in ticketview.php http://www.site.com/support_path/ticketview.php?id=[xss] http://www.site.com/support_path/ticketview.php?email=[xss] http://www.site.com/support_path/ticketview.php?cmd=deletepost&id=[xss] http://www.site.com/support_path/ticketview.php?cmd=deletepost&email=[xs s] ################################################################### [2] in ticket.php http://www.site.com/support_path/ticket.php?email=[xss] ################################################################# ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Greetings to all our friends .. ; SwEET-DeViL MiaL is gamr-14 (at) hotmail (dot) com [email concealed] or m-0-t (at) hotmail (dot) com [email concealed]