mailing list archives
Re: Libero.it (italian ISP) XSS vulnerability
From: Florian Stinglmayr <fstinglmayr () gmail com>
Date: Mon, 26 Mar 2007 14:44:08 +0200
Rosario Valotta wrote:
Libero.it, one of the most important italian ISP (www.libero.it) is
affected from a XSS vulnerability.
The vulnerability can be found in the "Community" section of Libero
portal, and the affected functionality is "add nick" (
The implementation of this functionality allows the injection of
malicious code in the URL, so that an attacker can steal username and
password of the victim accessing his cookie.
fstinglmayr () gmail com
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/