[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <00aa01c3ed01$bea01be0$a300a8c0@cryo>
From: clint at secureconsulting.com (Clint Bodungen)
Subject: home land tracker software
You misstyped your syntax... it should be:
<script>alert('secured!')</script>
But yes you are right.
----- Original Message -----
From: "Logan5" <Logan5@...an5.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Friday, February 06, 2004 3:06 PM
Subject: RE: [Full-Disclosure] home land tracker software
> LOL
>
> The NAMECHECK dialog is succeptable to XSS. Enter the following into
> any of the fields:
>
> <script>alert('secured!')</alert>
>
> -L5
>
Powered by blists - more mailing lists