Bugtraq mailing list archives
GamePlay.co.uk XSS
From: charlie () thehackersplace org
Date: 10 Jun 2006 00:57:52 -0000
Homepage: www.gameplay.co.uk Example: http://shop.gameplay.co.uk/webstore/advanced_search.asp?Keyword=&terms=!&badterm=<script>alert(document.cookie)</script> Also... The current password is not necessary for a successful password change for members of gameplay.co.uk which makes changing passwords through scripts as easy as tying your shoe lace. (https://shop.gameplay.co.uk/gameplay/changepassword.asp) I tried emailing these clowns about their silly flaws, but I had no joy. Charlie.
Current thread:
- GamePlay.co.uk XSS charlie (Jun 13)
- Re: GamePlay.co.uk XSS Patrick Morris (Jun 17)