OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
VALDEUX_at_aol.com
Date: Wed Jul 10 2002 - 10:48:09 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Name : FD Search Engine
    Vendor : Fluid Dynamics - http://www.xav.com
    Version : Probably all
    Demo : http://www.xav.com/search.pl

    Note : Sorry for my poor english ...
    -------------------------------------

    PROBLEM
        For a multiple result pages search, the script uses the variable Rank wich
    contains current result number.
        Anything could be written into, including HTML tags.

    EXEMPLE
        http://www.xav.com/search.pl?Realm=All&Match=0&Terms=test&nocpp=1&maxhits=10&
    Rank=<br><h1>XSS</h1>
    Note : it works because "test" returns several pages.

    SOLUTION
        None yet.