 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 83
 Members: 0
 Total: 83
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Can this be used for an hack. Url Change prints on the same |
|
 Posted: Wed Jun 10, 2009 2:01 pm |
 |
|
| shyspy |
| Advanced user |
 |
|
| Joined: Jun 08, 2009 |
| Posts: 60 |
|
|
|
 |
|
 |
|
hi,
If something like this would work on an social networking sites phishing would been at its peak.
Anyways i really couldn't make out what exactly can i do as with concerns to exploits Or hackz.
This is an university website that displays results.
The only thing from a students point of view would be to show your parents that you passed even if you did nt.
Can anyone share some more info as can this lead to a major problem Or site defacment Or server hack Or something.
Or can this be done to any website Or wht?
please share more info as what is this find of stuff know and what can it do as with readgs to hackz.
 |
|
Last edited by shyspy on Wed Jun 10, 2009 8:00 pm; edited 1 time in total |
|
|
|
| Posted: Wed Jun 10, 2009 6:29 pm |
|
|
| slsl |
| Advanced user |
 |
|
| Joined: Oct 14, 2008 |
| Posts: 66 |
|
|
|
|
|
|
|
| i suggest you take down all the sensitive info here but bassicly all that is is a xss vulnerability |
|
|
|
|
| Posted: Wed Jun 10, 2009 8:05 pm |
|
|
| shyspy |
| Advanced user |
|
|
| Joined: Jun 08, 2009 |
| Posts: 60 |
|
|
|
|
|
|
|
| slsl wrote: | | i suggest you take down all the sensitive info here but bassicly all that is is a xss vulnerability |
Can you share some more informationn on what can it lead to ..
Is it an major security hole. And how to overcome.
And yes what exactly is an xss vulnerability -- > If any1 know some basic tuts and tools for this please point me to that direction. |
|
|
|
|
| Posted: Thu Jun 11, 2009 12:18 am |
|
|
| slsl |
| Advanced user |
|
|
| Joined: Oct 14, 2008 |
| Posts: 66 |
|
|
|
|
|
|
|
| Xss is extremely common and bassicly what it does is that it allows a person to inject client side code into the webpage and there are two types of XSS permanant which stays on the page a temporary which is not stored what that was was not stored. What its most commonly used in is phishing and with temporary xss it usually requires someone to click on a link that leads to that url. |
|
|
|
|
|
Thankyou for information |
|
| Posted: Thu Jun 11, 2009 7:34 am |
|
|
| shyspy |
| Advanced user |
|
|
| Joined: Jun 08, 2009 |
| Posts: 60 |
|
|
|
|
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
