[NTLUG:Discuss] Apache or PHPNuke

David Ross davidwross1 at attbi.com
Fri Feb 21 07:45:47 CST 2003


I recently visited Bugtraq and found a vulnerability in myphpnuke:
http://WEB/myphpnuke/links.php?op=MostPopular&ratenum=[scr!pt]alert(document.cookie);[/scr!pt]&ratetype=percent
when i enter that as a url to my site (with the ! changed to an i and the 
correct script tags) my server returns:
"I don't like you....."  one page,no formatting,just text.
My question is,Where is this error message coming from? I can't seem to find 
it in any file in my html directory.Is it an Apache error message or PHP?
any help is appreciated as i would like to change that message.
David
-- 
this e-mail is certified windows free.



More information about the Discuss mailing list