TUCoPS :: Web :: Specific Sites :: b06-3112.htm

Ratescene.co.uk - XSS with session disclosure
Ratescene.co.uk - XSS with session disclosure
Ratescene.co.uk - XSS with session disclosure



Ratescene.co.uk=0D
=0D
Homepage:=0D
http://www.ratescene.co.uk=0D 
=0D
Affected files:=0D
input boxes of editing your profile=0D
------------------------------------------------=0D
=0D
Profile input boxes XSS vuln with cookie disclosure:=0D
Data isn't sanatized, try entering the code below:=0D
=0D
=0D
=0D
=0D
Screenshots:=0D
http://www.youfucktard.com/xsp/ratescene1.jpg=0D 
http://www.youfucktard.com/xsp/ratescene2.jpg=0D 
=0D
--------------------------------------------------=0D
=0D
And uh..it seems I can't test this site anymore. Right as i'm testing Isee errors start appearing and then I see this:=0D
=0D
http://youfucktard.com/xsp/ratescene3.jpg=0D 
=0D
When going back to that other site; ratemylook.co.uk site, i notice I have a e-mail in the site inbox:=0D
=0D
http://www.youfucktard.com/xsp/ratemyscene4.jpg=0D 
=0D
LoL!=0D

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH