Re: [Full-disclosure] Persistant XSS Vulnerability in rediff

[Jeff Williams <jeffwillis30@xxxxxxxxx>]

Hey Mustlive, if you still alive you should talk about this on your blog :)

2010/2/2 rockey killer <skg102@xxxxxxxxx>

> *About Redif*f
>
> Rediff.com (Nasdaq: REDF) is one of the premier worldwide online providers
> of news, information, communication, entertainment and shopping services.
>
> Rediff.com provides a platform for Indians worldwide to connect with one
> another online. Rediff.com is committed to offering a personalized and a
> secure surfing and shopping environment.
>
>  Rediff.com additionally offers the Indian American community one of the
> oldest and largest Indian weekly newspapers, India Abroad.
>
> Founded in 1996, Rediff.com is headquartered in Mumbai, India with offices
> in New Delhi, Bangalore, Chennai, Hyderabad and New York, USA.
>
> Mission In The Internet Space
>
> To provide world-class online consumer service offerings to Indians
> worldwide.
>
> *
> *
>
> *Vulnerability*
>
> Persistant XSS Vulnerability in Subject field of rediff
>
> Vulnerability Reported on : Sat, Jan 23, 2010 at 1:23 AM
>
> But they din't even cared to respond back .
>
>  *
> *
>
> *Credits*
>
> This Vulnerability was discovered and reported by w4rl0ck.d0wn and Rockey
> Killer of h4ck3r crew
>
> *
> *
>
> *POC*
>
> http://h4ck3r.in/Reported%20Vulnerabilities/rediff/
>
>
> Rockey Killer
> h4ck3r Crew <http://h4ck3r.in/>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/