TUCoPS :: Web :: Specific Sites

TUCoPS :: Web :: Specific Sites :: b06-3104.htm
Hotscripts.com - XSS with cookie disclosure

Hotscripts.com - XSS with cookie disclosure Hotscripts.com - XSS with cookie disclosure


Hotscripts.com=0D
=0D
Homepage:=0D
http://www.hotscripts.com=0D 
  =0D
Effected files:=0D
search input box=0D
adding a review=0D
Editing your profile=0D
sending a author a message.=0D
Creating a new listing=0D
----------------------------------------=0D
=0D
XSS vuln with cookie disclosure in search input box:=0D
=0D
For a PoC try putting: <"<"<"<"