Security News Portal - XSS Untrusted Links

["morning_wood" <se_cur_ity () hotmail com>]

http://www.securitynewsportal.com/cgi-bin/news5.cgi?target=exploitlabs.com/haxed
.html
or
http://www.securitynewsportal.com/cgi-bin/news5.cgi?target=www.infosyssec.com/fo
rum/templates/phpXPAnti/images/WS_FTP.LOG
or
http://www.securitynewsportal.com/cgi-bin/news5.cgi?target=verynastyurl-script-u
rl
oh hell
http://www.securitynewsportal.com/cgi-bin/news5.cgi?target=hustler.com

you get the idea.... come on SNP, get your act together

Donnie Werner
http://exploitlabs.com
http://e2-labs.com



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html