Hotscripts.com=0D
=0D
Homepage:=0D
http://www.hotscripts.com=0D 
  =0D
Effected files:=0D
search input box=0D
adding a review=0D
Editing your profile=0D
sending a author a message.=0D
Creating a new listing=0D
----------------------------------------=0D
=0D
XSS vuln with cookie disclosure in search input box:=0D
=0D
For a PoC try putting: <"<"<"<"



The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2009 AOH

We do not send spam.  If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.