|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
RE: XSS in lighttpd
From: Bart Seresia (bart
wsn.be)
Date: Mon Feb 12 2007 - 17:59:53 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
I checked this on gentoo running lighttpd 1.4.11... Nothing abnormal seen.
Just the normal page, or a 404 error.
Regards,
Bart
-----Oorspronkelijk bericht-----
Van: bl4ckbsdmail.org [mailto:bl4ckbsdmail.org]
Verzonden: vrijdag 9 februari 2007 22:34
Aan: bugtraqsecurityfocus.com
Onderwerp: XSS in lighttpd
hey guys .. check out this new xss i just found ;P
Vulnerable : lighttpd
web : http://www.lighttpd.net
XSS :
http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2
Fscript%3E
Discovered By BLacK ZeRo
bL4ckbsdmail.org
Best regards ,,
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]