OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Matthew Murphy (mattmurphy_at_kc.rr.com)
Date: Sun Aug 25 2002 - 10:54:09 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    OmniHTTPd's Test.shtml sample is also vulnerable to a similar issue:

    http://localhost/test.shtml?%3CSCRIPT%3Ealert(document.URL)%3C%2FSCRIPT%3E=x

    Will pop up an alert containing the above URL. Of course, this has other
    uses (cookie theft, faking sources, etc.)