Webboard: Reflective XSS

[email protected] 9 Dec 2009 12:00:54 -0000

Newsgroups	gmane.comp.web.mnogosearch.general
Message-ID	<[email protected]>

Author: Zhenya
Email: 
Message:
I see now that the problem is reproduced everywhere.

Suppose we have a new empty web-site.

Create a simple html-file:

<html><head></head>

<body><p>WHAT</body>

</html>

Then fill your database using "indexer".

Then make the request: http://localhost/cgi-bin/search.cgi?q=who&>"><script>alert(123)</script><"=Search!

We don't have the word "who". It's OK.

And now make the request: http://localhost/cgi-bin/search.cgi?q=what&>"><script>alert(123)</script><"=Search!

We HAVE the word "what" and we've got alert messages.

Reply: <http://www.mnogosearch.org/board/message.php?id=21018>