Howdy, Stranger!
It looks like you're new here. If you want to get involved, click one of these buttons!
Top Posters
Who's Online (1)
- Phage 4:09PM
Powered by Vanilla.
Made with Bootstrap.
Would this be classed as XSS vuln
-
So whilst helping a friend, just testing if his dad's site is secure i came across this
http://i25.lulzimg.com/14f508.jpg
Now th boxes when submitted had
<script>alert(\"XSS\")</scipt>
And as you can see there is a quotation mark and a greater than symbol next to the box, does this mean it is vuln???Skype: mrpt3oTwitter: MrPteo
-
If you pm me the URL il check it out but you havent given much infoXin
-
to recreate what i had, just type
<script>alert("<!--XSS-->")</script>
in all the fields, and just select anything for the dropdownsSkype: mrpt3oTwitter: MrPteo -
to recreate what i had, just type
<script>alert("<!--XSS-->")</script>
in all the fields, and just select anything for the dropdowns
Try some of the tags displayed in this:
http://www.thespanner.co.uk/2007/11/19/unusual-xss-vectors/
This one below is usually pretty good, and can be used very effectively for stored attacks...or demonstrations.
<p onmouseover=alert(/XSS/)>Some very long paragraph goes here.</p>while( !(succeed = try() ) ); -
to recreate what i had, just type
<script>alert("<!--XSS-->")</script>
in all the fields, and just select anything for the dropdowns
Yeah i did that and it didnt come up with what you hadXin
