Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Greek Web Election System Sucks - Remote File Inclusion?

From: ascii (asciikatamail.com)
Date: Sat Sep 22 2007 - 19:46:45 CDT

George Papandreou wrote:
> There is no wonder why in hell Kostas Karamanlis is still our prime
> http://www.ekloges.ypes.gr/pages/index.html?http://www.secunia.com
> http://www.ekloges.ypes.gr/pages/index.html?../lib/../lib/jslib.js
> http://www.ekloges.ypes.gr/pages/index.html?../lib/default.css

client side stuff, no rfi here.

 <script type="text/javascript">

  function fillFrame()
  var a=location.search;
  a=(a ? a.slice(1) : 'epikratia_map.html');


this can be used to execute JS using the javascript: handler so it's a
security issue


have you notified the webmaster?

Francesco `ascii` Ongaro

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/