OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] XSS at Netcraft.com

From: Pigrelax (Pigrelaxyandex.ru)
Date: Wed Aug 02 2006 - 15:22:10 CDT


>>Hi All!
>>
>>This time XSS vulnerability at Netcraft. Hope this company will act a bit
>>sooner than others.
>>
>>
>>
>>Example of vulnerability is as usually in my blog at
>>http://www.securitylab.ru/blog/tecklord/?category=19

Ironically, Netcraft provides security services and takes money for discovery of XSS vulnerabilities:

http://audited.netcraft.com/web-application

Not cool guys, not cool

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/