full-disclosure - Persistant XSS Vulnerability in rediff

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <a9bd0b751002010739g5002398bk71f2192caecb3ec@mail.gmail.com>
Date: Mon, 1 Feb 2010 21:09:29 +0530
From: rockey killer <skg102@...il.com>
To: h4ck3r_in@...glegroups.com, null-co-in@...glegroups.com, 
	bugtraq@...urityfocus.co, sec-adv@...unia.com, 
	full-disclosure@...ts.grok.org.uk
Subject: Persistant XSS Vulnerability in rediff

*About Redif*f

Rediff.com (Nasdaq: REDF) is one of the premier worldwide online providers
of news, information, communication, entertainment and shopping services.

Rediff.com provides a platform for Indians worldwide to connect with one
another online. Rediff.com is committed to offering a personalized and a
secure surfing and shopping environment.

 Rediff.com additionally offers the Indian American community one of the
oldest and largest Indian weekly newspapers, India Abroad.

Founded in 1996, Rediff.com is headquartered in Mumbai, India with offices
in New Delhi, Bangalore, Chennai, Hyderabad and New York, USA.

Mission In The Internet Space

To provide world-class online consumer service offerings to Indians
worldwide.

*
*

*Vulnerability*

Persistant XSS Vulnerability in Subject field of rediff

Vulnerability Reported on : Sat, Jan 23, 2010 at 1:23 AM

But they din't even cared to respond back .

 *
*

*Credits*

This Vulnerability was discovered and reported by w4rl0ck.d0wn and Rockey
Killer of h4ck3r crew

*
*

*POC*

http://h4ck3r.in/Reported%20Vulnerabilities/rediff/

Rockey Killer
h4ck3r Crew <http://h4ck3r.in/>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/