ok. i have found an xss hole in the ninja_store search engine.
http://ninjitsu-technique.com/ninja_store on that page, in the search box type <script>alert("this is an xss found by stealth");</script> and take a look.
this isn't big as far as i know but it could become a bigger issue/other holes may exist.
i noticed admin left, however if you can contact him let him know. the last thing we need is some jackass ,like shayden to actually learn how to exploit these things.
btw this is an example, the string could be other javascript as well.
just thought id put it out there.
update:i forgot to mention that at this stage it means nothing, other than bad coding of the search bar. dont be too worried about this, right now your fine, unless it leads to more vulns.
