OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln.

From: AdvisoryAria-Security.Net, (AdvisoryAria-Security.Net)
Date: Fri Oct 19 2007 - 23:46:49 CDT


Aria-Security Team
http://Aria-Security.net/
-------------------------------------------------
SearchSimon Lite Cross-Site Scripting
The file Name may be different in different websites

PoC
filename.asp?QUERY=[XSS]&Submit=Search%21&ACTION=SEARCH

Credits Goes To Aria-Security Team
Aria-Security.Net
The-0utl4w