Re: [Full-disclosure] Another XSS vulnerability in Italian providerLibero.it
- From: "MailLists Listas" <seclistas@xxxxxxxxx>
- Date: Thu, 29 Mar 2007 22:56:05 -0300
https://metalink.oracle.com/metalink/plsql/f?p=200:101:1834058191406040565¬ification_msg=<script>alert(document.cookie)</script>
On 3/29/07, Edmond Dantes <jk3380@xxxxxxxxx> wrote:
paura@xxxxxxxxxxxxx wrote:
They probably need to redo their entire site's scripts, I wouldn't doubt
there's a few more exploits in there somewhere. -- 2+ exploits within one
site in one month is pretty sad.
Hemmm...
The same guys relased another 4 just a few minutes ago.
The idiot part is that Libero strongly refuse to contact the guys even if they continue to say that they have other XSSs and want to contact the admins...
They told libero : 'we have other vulns, will you tell us who can cope with them' but received no answers... :)
Sort of sad...
Maybe not... at least for me ;-))
Expose more. My ex girl friend met her new guy there. Maybe I can pull some
tricks ;-)
/CapitanMutanda
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- References:
- Prev by Date: [Full-disclosure] CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability
- Next by Date: [Full-disclosure] VMSA-2007-0002 VMware ESX security updates
- Previous by thread: Re: [Full-disclosure] Another XSS vulnerability in Italian providerLibero.it
- Next by thread: [Full-disclosure] [ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities
- Index(es):
Relevant Pages
|
