Vulnerability: Cross Site Scripting (XSS)
Attack Input: Form-Name: http://xssoops.com/xss1.html
Field Name: foo
<html><head><title>Form</title></head>
<body>
You came from: http://www.google.com<form action="/xss1.html" method="POST">
<input type="text" name="foo" />
<input type="hidden" name="bar" value="secret"/>
<input type="submit" />
</form>
foo = "<xss00ps>'\\\<br />
bar = secret<br />
Arbitrary args: my_cookie = my_value<br />
</body>
</html>
|