| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20060607201325.2559.qmail@securityfocus.com>
Date: 7 Jun 2006 20:13:25 -0000
From: luny@...fucktard.com
To: bugtraq@...urityfocus.com
Subject: PBL Guestbook v1.31 - XSS
PBLGuestbook v1.31
Homepage:
http://www.pixelatedbylev.com/
Effected files:
input boxes of the guestbook.
XSS Vulnerabilities PoC:
I noticed that common tags like <script> are filtered into the words "SCRIPT BLOCKED" in this guestbook, however img tags as well as others go unfiltered in the Name, Email,and Website boxes. In turn, this could cause an XSS
attack to occur. For PoC just enter: <IMG SRC=javascript:alert('XSS')> in any of these boxes.
Powered by blists - more mailing lists