[30818] in bugtraq
Re: Microsoft ISA Server HTTP error handler XSS (TL#007)
daemon@ATHENA.MIT.EDU (http-equiv@excite.com)
Sat Jul 19 15:19:06 2003
Message-Id: <200307191407.h6JE7cL7031253@web160.megawebservers.com>
To: <bugtraq@securityfocus.com>, <NTBugtraq@listserv.ntbugtraq.com>
Date: Sat, 19 Jul 2003 14:07:37 -0000
From: "http-equiv@excite.com" <1@malware.com>
Reply-To: 1@malware.com
>
> <A href="http://%09%09%09%09%09%09%09
> 09www.malware.com">http://www.microsoft.com</A>
The following will represent a true status and a false destination:
<A href="http://www.microsoft.com%09%09%09@%09%09%09%09%09%09
09www.malware.com">http://www.microsoft.com</A>
--
http://www.malware.com