[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo

To: an@xxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
From: paul.szabo@xxxxxxxxxxxxx
Date: Tue, 19 Oct 2010 20:24:23 +1100

Dear An,

> Referrer: <script>alert(1)</script>

Yes, but... seems not all echo's get a Referer passed to them.

Cheers, Paul

Paul Szabo   psz@xxxxxxxxxxxxxxxxx   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

References:
- Re: RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  - From: an

Prev by Date: Antivirus detection after malware execution
Next by Date: H2HC Cancun - Registrations are open
Previous by thread: Re: RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
Next by thread: Re: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
Index(es):
- Date
- Thread