Bugtraq mailing list archives

MyTrueHood.com - XSS

From: luny () youfucktard com
Date: 2 Jun 2006 09:07:18 -0000

MyTrueHood.com

Homepage:
http://www.mytruehood.com

Effected files:
Input boxes of submitting a comment and signing a guestbook

XSS proof of concept:

put <IMG SRC="javascript:alert('XSS');">  in the signing aguestbook or leaving a comment in a blog box.

Current thread:

MyTrueHood.com - XSS luny (Jun 02)