New Xss Hackernetwork Mail Vulnerability=0D
=0D
Hackernetwork Mail Xss[Search] Vulnerability=0D
=0D
ENGLISH=0D
=0D
#Title : Hackernetwork Mail Xss[Search] Vulnerability=0D
=0D
#Author: ajann=0D
=0D
Example;=0D
=0D
http://hackernetwork.mail.everyone.net/email/scripts/contacts.pl?goToMenu=&EV1=11481394101759371&ab_to=&deleteFlag=&pageNumber=0&matchString=XSS(Url Encode)&matchField=firstName&sortOrder=asc&&addrBook=personal&search_matchField=firstName=0D 
=0D
TURKISH=0D
=0D
#Title : Hackernetwork Mail Xss[Search] Vulnerability=0D
=0D
#Author: ajann=0D
=0D
=D6rnek;=0D
=0D
http://hackernetwork.mail.everyone.net/email/scripts/contacts.pl?goToMenu=&EV1=11481394101759371&ab_to=&deleteFlag=&pageNumber=0&matchString=XSS KODUNUZ&matchField=firstName&sortOrder=asc&&addrBook=personal&search_matchField=firstName=0D 
=0D
A=E7ıklama:=0D
=0D
Adres defterinde bulunan filtreleme eksikliği nedeniyle ararken xss yedirilebilmektedir.=0D
Bir loglama scripti yazarak şifre ve kullanıcı adını encodesiz ele ge=E7irebilirsiniz.