Vulnerability Development mailing list archives

Re: CSS implication


From: Bill Weiss <houdini () nmt edu>
Date: Sun, 17 Mar 2002 22:31:15 -0700

Frog Man(leseulfrog () hotmail com)@Sun, Mar 17, 2002 at 06:40:24PM +0100:
I'm not sure but I think that SSI can be used with CSS.
Then we can include file :<!--#include virtual="thefile"-->, execute 
commands <!--#exec cmd="/user/bin/perl/date"--> and execute CGI script 
<!--#exec cgi="cgi/cgi.cgi"-->.
If that's false, please say it to me.
Sorry for my bad englsih :)
frog-m@n
 
If (a big if) the server supports SSI, and the injected bit of script is held
in an HTML file or something else parsed by the server instead of sent directly 
to the user (like a CGI), then SSI would work.

-- 
Bill Weiss


Current thread: