Norman.com download submission form XSS bug

Vulnerable page: http://www.norman.com/home_and_small_office/trials_downloads/

Specified page shows a frame linked from http://newton.norman.com/, so you have to post to that frame in order for XSS to work.


You can either include any XSS code in name input box, or request any XSS code directly using POST method and name parameter.



Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Комментарии

There are no comments for this news article, you can leave one here.