bugtraq - xss in hackmeeting.org

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <1222475529.6885.15.camel@localhost>
Date: Sat, 27 Sep 2008 02:32:09 +0200
From: wiky <indirizzo_sicuro@...istici.org>
To: hackmeeting@...entati.org
Cc: bugtraq@...urityfocus.com
Subject: xss in hackmeeting.org

## description:

hackmeeting.org sux.

It's not opensource, it's not versioned, it's not submitted to
community, it's made by idiots.

## XSS

example, valid until authors decide to maintain same version but change
code (as usual):

http://hackmeeting.org/voloete%20solo%20vendere%20le%20cazzo%20di%
20birre%20fate%20solo%20cagare%20voi%20ed%20i%20vostri%20metabolismi%
20che%20poi%20son%20solo%20%22fammi%20fare%20i%20cazzi%20miei%22%20...%
20ahahah,%20meno%20male%20gli%20apici%20stan%20escapati%20eh



aloha,
-- 
wiky
0x361BABC4

Download attachment "signature.asc" of type "application/pgp-signature" (164 bytes)