[PHP] This code using _GET exploitable

[filtered]

Hi,

we have script containing

 <? echo $_GET['studio'] ?>

and

    <?
        $cam = $_GET['cam'];

        if ($cam == '1') {
            echo '<img src="http://example.com"";  />';
        }
   ?>

Is this code prone to XSS attacks or for attacking the local webserver
and if so, how?

$cam isn't used anywhere else.

-a

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php