#Aria-Security Team Advisory # # #Original Advisory: #http://www.aria-security.com/forum/showthread.php?t=40 #----------------------- ------------------------------------ #Software: iNews News Manager #Method: SQL Injection # #PoC: #http://target/path/articles.asp?ex=[XSS] # # #Contact: Advisory@aria-security.net