Netscape.com - Cross site scripting vulnerability=0D
----------------------------------------------=0D
Type: Cross site scripting=0D
=0D
Date: June, 13th 2006=0D
----------------------------------------------=0D
=0D
Credits:=0D
----------------------------------------------=0D
Discovered by: David "Aesthetico" Vieira-Kurz=0D
http://www.majorsecurity.de=0D 
----------------------------------------------=0D
=0D
Affected pages:=0D
----------------------------------------------=0D
1. http://netscape.com=0D 
2. http://search.netscape.com=0D 
3. http://channels.netscape.com=0D 
=0D
Vulnerability:=0D
----------------------------------------------=0D
I found a bug in the search boxes of the Netscape Network.=0D
If you type in a "searchword" into the searchbox of "http://netscape.com" or "http://channels.netscape.com"=0D 
you'll be automaticly redirected to "http://search.netscape.com" and you'll see the results of your search.=0D 
=0D
Input passed to the "query" parameter in "search?"-file is not properly sanitised before being returned to the user. =0D
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.=0D
=0D
Sending a malicious code will result a code working on the page that pops up...=0D
=0D
=0D">http://search.netscape.com/ns/search?query==0D 
=0D
Example:=0D
----------------------------------------------=0D
=0D">http://search.netscape.com/ns/search?query==0D 
=0D
Screenshots:=0D
----------------------------------------------=0D
http://majorsecurity.de/advisory/netscape_bug/netscape1.JPG=0D 
http://majorsecurity.de/advisory/netscape_bug/netscape2.JPG=0D 
http://majorsecurity.de/advisory/netscape_bug/netscape3.JPG