#43 XSS Injection

[micamedia]

index.php line 121..

<form name="user_agent_string" method="get" action="<?php print $script_path; ?>">

That is open for injection.. change it to:

<form name="user_agent_string" method="get" action="<?php print (htmlspecialchars($script_path)); ?>">

problem solved.