Vulnerability: Cross Site Scripting (XSS)
Attack Input: Form-Name: http://xssoops.com/xss1.html//
Field Name: overall
<html><head><title>Form</title></head>
<body>
You came from: http://www.google.com<form action="/xss1.html/<xss00ps>/" method="POST">
<input type="text" name="foo" />
<input type="hidden" name="bar" value="secret"/>
<input type="submit" />
</form>
foo = Array<br />
bar = secret<br />
Arbitrary args: my_cookie = my_value<br />
</body>
</html>
|