Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Matthew Murphy (mattmurphy_at_kc.rr.com)
Date: Sat Sep 14 2002 - 17:11:44 CDT
Lycos offers several advanced web applications through a service called
HTMLGear. Among the services offered are guestbooks. A vulnerability
exists in the Lycos guestbook that could enable someone to launch an attack
against visitors whose browsers supported inline CSS (IE, for example).
By specifying an e-mail address/web page URL like the following:
guestbook also allow a typical IMG attack:
This will yield the same results in many cases.