<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Recent changes to bugs</title><link>https://sourceforge.net/p/phpmybible/bugs/</link><description>Recent changes to bugs</description><atom:link href="https://sourceforge.net/p/phpmybible/bugs/feed.rss" rel="self"/><language>en</language><lastBuildDate>Sun, 15 Apr 2012 12:53:55 -0000</lastBuildDate><atom:link href="https://sourceforge.net/p/phpmybible/bugs/feed.rss" rel="self" type="application/rss+xml"/><item><title>Multiple XSS</title><link>https://sourceforge.net/p/phpmybible/bugs/1/</link><description>&lt;div class="markdown_content"&gt;&lt;p&gt;##### Vulnerability #####&lt;/p&gt;
&lt;p&gt;phpMyBible has multiple XSS vulnerabilities.&lt;br /&gt;
&lt;/p&gt;
&lt;p&gt;When reading a section of the Bible; both the 'version' and 'chapter' variables are prone to reflective XSS.&lt;/p&gt;
&lt;p&gt;##### Exploit #####&lt;/p&gt;
&lt;p&gt;&lt;a href="http://localhost/index.php?book=1&amp;amp;version=\" rel="nofollow"&gt;http://localhost/index.php?book=1&amp;amp;version=\&lt;/a&gt;[XSS]&amp;amp;chapter=[XSS]&lt;/p&gt;
&lt;p&gt;##### Vendor Notification #####&lt;/p&gt;
&lt;p&gt;04/15/12 - Vendor Notified&lt;/p&gt;&lt;/div&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">G13</dc:creator><pubDate>Sun, 15 Apr 2012 12:53:55 -0000</pubDate><guid>https://sourceforge.net33782073045bd396e3dfedd60e9bbc0257d75a11</guid></item></channel></rss>