I found xss vulnerabity which is exploited by appending attack in the url parameters. For eg. the original url site.com/?s=login&m=forgotten And the attack url ...
First, why is HTTP TRACE method allowed on a website Isn't it a bad thing for web server or its users' security? Second, when I run the following PHP script via my browser... <?php $service_port ...