Full Disclosure mailing list archives
Re: Facebook vuln.
From: ichib0d crane <themadichib0d () gmail com>
Date: Sun, 22 May 2011 11:46:02 -0700
Turns out....not so much :P https://www.facebook.com/connect/connect_to_node_error.php?body=%3Cscript%3Ealert%28String.fromCharCode%2888,%2083,%2083%29%29%3C/script%3E Sure maybe there is a way to bypass the filter but good luck. Probably be a good idea to include a better PoC next time.
On Sun, May 22, 2011 at 11:28 AM, Gustavo <gustavorobertux () gmail com> wrote: https://www.facebook.com/connect/connect_to_node_error.php?body=VULNERABLE :( _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Facebook vuln. Gustavo (May 22)
- Message not available
- Re: Facebook vuln. ichib0d crane (May 22)
- Re: Facebook vuln. Atul Agarwal (May 22)
- Re: Facebook vuln. ichib0d crane (May 22)
- Message not available