Re: Arin.net XSS

[Michael Holstein <michael.holstein () csuohio edu>]

> Here's a link that will probably work under both browsers
>
> http://ws.arin.net/whois/?queryinput=%3Cscript%3Ealert('666')%3C/script%3E

(Firefox 1.5.0.1 on Linux)

No match found for <script>alert('666')</script>.

# ARIN WHOIS database, last updated 2006-03-02 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/