bugtraq - XSS in orkut.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 15 May 2006 22:45:37 +0530
From: "Rohin Koul" <rohin.koul@...il.com>
To: bugtraq@...urityfocus.com
Subject: XSS in orkut.com

Hi,
I found this little XSS thing with the search.aspx page of orkut.com.
The page uses GET method to get user criteria for searching the
profiles of people.
The fields textboxAgeFrom and textboxAgeTo in the URL are not verified
and one can inject any html code using these parameters.
Proof of concept
http://www.orkut.com/Search.aspx?q=&checkPhoto=on&dropdownLocation=1&textboxZip=&textboxAgeFrom=&textboxAgeTo=%3Cinput+type%3Dsubmit+onclick%3Djavascript%3Aalert%28%27a%27%29%3E&dropdownDating=choose&degree=radioAll&hiddenState=&hiddenCountry=91&view=&pno=1

Note: You should be logged in to orkut to access this page.

-- 
"if you don't know where you are going,
what difference does it make,which path you take"
---Cheshire Cat