Title : phpMyForum Cross Site Scripting & CRLF injection
Author: Mourad aka Psych0
Moroccan Security Team
Vendor: www.phpmyforum.de
Version: 4.0
Examples:
http://target/path/index.php?page=[xsscode]&type=text%2Fcss
http://target/path/index.php?templat...ookie%3Aheader

Likes:

Quote