#2 Cross Site Scripting Attack vulnerability

[Matt B]

There is a danger of a user with ill intent using the IMG
SRC to run a script to send a users details to another
site.

The details of how this can be done are here:
http://en.wikibooks.org/wiki/Programming:PHP:Cross_Sit
e_Scripting

The weakness is in the way the script deals with user
input for banner img src. The link also details some
cures.