bugtraq - SF-Users V1.0 XSS injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060502143215.27245.qmail@securityfocus.com>
Date: 2 May 2006 14:32:15 -0000
From: zerogue@...il.com
To: bugtraq@...urityfocus.com
Subject: SF-Users V1.0 XSS injection

SF-Users V1.0 XSS injection

Discovered by: Nomenumbra
Date: 5/2/2006
impact:moderate (privilege escalation,possible defacement)

The username with which you sign up isn't properly sanitized so it's possible to 
insert some javascript there.

The single quote is filtered so we'll have to use &#39; or %27. A username like this:

<IMG SRC=javascript:alert(%27!%27)> would be displayed on the user page as XSS, the rest is left to
your fantasy.

Nomenumbra/[0x4F4C]