Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Inertia News Remote File İnclude

XSS in lighttpd

XSS in communityserver !

XSS in JBoss Portal

From:	bl4ck_(at)_bsdmail.org <bl4ck_(at)_bsdmail.org>
Date:	13.02.2007
Subject:	XSS in eWay

hey guys .. check out this new xss i just found  ;P  

Vulnerable : eWay
web : http://www.eway.no/eway


XSS :

http://127.0.0.1/path/default.aspx?pid="><script>alert('bl4
ck')</script>


Discovered  By BLacK ZeRo
bL4ck@bsdmail.org

Best regards ,,