full-disclosure - Re: XSS vulnerabilty on eenmiljardseconden.frankdeboosere.be

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAJVRA1T+Bj4Nv9BTCjOOXHR_hkYmsW_Mq=5ik8gMJ11motSoFw@mail.gmail.com>
Date: Mon, 16 Jul 2012 02:57:54 -0700
From: coderman <coderman@...il.com>
To: Yvan Janssens <Yvan.Janssens@...co.com>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: XSS vulnerabilty on
	eenmiljardseconden.frankdeboosere.be

On Mon, Jul 16, 2012 at 12:23 AM, Yvan Janssens <Yvan.Janssens@...co.com> wrote:
>....
> I found an XSS vulnerability in http://eenmiljardseconden.frankdeboosere.be/
> . This vulnerability was possible due to invalid input validation/bad
> programming. The owner  was contacted and a satiric fix was deployed.
> ...
> It is now solved, and if you try to execute it again, you get a link to Rick
> Astley’s  “Never gonna give you up” on YT.

priceless! ++

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/