Vulnerability: Cross Site Scripting (XSS)
Attack Input: Form-Name: http://xssoops.com/xss1.html/
Field Name: bar
<html><head><title>Form</title></head>
<body>
You came from: http://www.google.com<form action="/xss1.html/" method="POST">
<input type="text" name="foo" />
<input type="hidden" name="bar" value="secret"/>
<input type="submit" />
</form>
foo = <br />
bar = "<xss00ps>'\\\<br />
Arbitrary args: my_cookie = my_value<br />
</body>
</html>
|