Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




bugtraq logo Bugtraq mailing list archives

Re: [Full-disclosure] XSS at Aon.at, Austrian ISP
From: "Nikolay Kichukov" <hijacker () oldum net>
Date: Sun, 25 Mar 2007 11:20:04 +0300

seems already fixed ... good job.

-Nikolay Kichukov

----- Original Message ----- 
From: "Florian Stinglmayr" <fstinglmayr () gmail com>
To: <bugtraq () securityfocus com>; <full-disclosure () lists grok org uk>
Sent: Tuesday, March 13, 2007 10:09 AM
Subject: [Full-disclosure] XSS at Aon.at, Austrian ISP


Here we go:

http://jawe.aon.at/search/aon.sp?query=<script>alert(1);</script>

The issue has been reported to AON before.

Regards,
Florian Stinglmayr

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



  By Date           By Thread  

Current thread:
  • Re: [Full-disclosure] XSS at Aon.at, Austrian ISP Nikolay Kichukov (Mar 26)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]