#Aria-Security Team #http://Aria-Security.com #Contact: Advisory@xxxxxxxxxxxxxxxxx #Type:Remote Cross-Site Scripting #Article on XSS: http://aria-security.net/xss.rar #Discovered By Aria-Security Team #Software: XMB U2u Instant Messenger # #Explanation: First of all user must be REGISTERED - Go to http://target/xmbpath/memcp.php ---> U2U Instant Messenger - Inster your xss code for the recipient - Press Preview Original Advisory http://aria-security.com/forum/showthread.php?p=129