TUCoPS :: Web :: Specific Sites

TUCoPS :: Web :: Specific Sites :: b06-3124.htm
B3ta.com - XSS with cookie disclosure

B3ta.com - XSS with cookie disclosure B3ta.com - XSS with cookie disclosure


B3ta.com=0D
=0D
Homepage:=0D
http://www.b3ta.com=0D 
=0D
Affected files:=0D
Input boxes of your profile=0D
=0D
=0D
XSS vuln with cookie disclosure via Profile: box.=0D
=0D
Data isn't correctly sanatized before being generated. We can bypass the filters of the site one way by using img tags and converting our javascript to UTF-8 unicode. PoC:=0D
=0D
=0D
=0D
Screenshots:=0D
=0D
http://www.youfucktard.com/xsp/b3ta1.jpg=0D 
http://www.youfucktard.com/xsp/b3ta2.jpg