Webboard: Reflective XSS

Author: Alexander Barkov
Email: 
Message:
> I am using 3.3.8 and am able to get the search server to dish up this XSS attack?  I am not 

> able to get around it, is there a solution I am missing?

> 

> http://yourserver.com/cgi-bin/search.cgi?

> mode=sp1596f6%22%3E%3Cscript%3Ealert%28123%29%3C/script%3E8c072219dcf&btnSubmi

> t=Go

> 

> I am not using my server name here, I don't want to take the risk of listing a vulnerable 

> server.

> 

> I would appreciate any help.

> 



Hi Paul,



I cannot reproduce any problems with the default template search.htm.



Maybe you're using $(mode) instead of $&(mode) in your template,

so the HTML code passed in the query string does not get properly 

escaped and is printed as is.



If this doesn't help, please send your template to

bar[at]mnogosearch[dot]org, I will check your template.



Reply: <http://www.mnogosearch.org/board/message.php?id=20995>