full-disclosure - Re: Persistant XSS Vulnerability in rediff

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 2 Feb 2010 08:50:04 +1100
From: Jeff Williams <jeffwillis30@...il.com>
To: full-disclosure@...ts.grok.org.uk
Cc: MustLive <mustlive@...security.com.ua>
Subject: Re: Persistant XSS Vulnerability in rediff

Hey Mustlive, if you still alive you should talk about this on your blog :)

2010/2/2 rockey killer <skg102@...il.com>

> *About Redif*f
>
> Rediff.com (Nasdaq: REDF) is one of the premier worldwide online providers
> of news, information, communication, entertainment and shopping services.
>
> Rediff.com provides a platform for Indians worldwide to connect with one
> another online. Rediff.com is committed to offering a personalized and a
> secure surfing and shopping environment.
>
>  Rediff.com additionally offers the Indian American community one of the
> oldest and largest Indian weekly newspapers, India Abroad.
>
> Founded in 1996, Rediff.com is headquartered in Mumbai, India with offices
> in New Delhi, Bangalore, Chennai, Hyderabad and New York, USA.
>
> Mission In The Internet Space
>
> To provide world-class online consumer service offerings to Indians
> worldwide.
>
> *
> *
>
> *Vulnerability*
>
> Persistant XSS Vulnerability in Subject field of rediff
>
> Vulnerability Reported on : Sat, Jan 23, 2010 at 1:23 AM
>
> But they din't even cared to respond back .
>
>  *
> *
>
> *Credits*
>
> This Vulnerability was discovered and reported by w4rl0ck.d0wn and Rockey
> Killer of h4ck3r crew
>
> *
> *
>
> *POC*
>
> http://h4ck3r.in/Reported%20Vulnerabilities/rediff/
>
>
> Rockey Killer
> h4ck3r Crew <http://h4ck3r.in/>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/