Description - Referer XSS in E-Blah Platinum

Cross Site Scripting found in E-Blah Platinum script.

Exploit
Available
Solution
Available

Vulnerable script: Code/Routines.pl

Environment variable 'HTTP_REFERER' isn't properly sanitized. This can be used to post HTTP query with fake Referer value which may contain arbitrary html or script code. This code will be executed when administrator will open "Click Log".

Administrator's login and password are threatened.

Order Source Code Testing

Check your website by source code analysis of your site made by Aliaksandr Hartsuyeu.The order will be done by experts in website security.