Re: XSS at Netcraft.com

["Pigrelax" <Pigrelax () yandex ru>]

> > Hi All!
> >
> > This time XSS vulnerability at Netcraft. Hope this company will act a bit 
> > sooner than others.
> >
> >
> >
> > Example of vulnerability is as usually in my blog at 
> > http://www.securitylab.ru/blog/tecklord/?category=19

Ironically, Netcraft provides security services and takes money for discovery of XSS vulnerabilities:

http://audited.netcraft.com/web-application

Not cool guys, not cool

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/