advisories ... MSN Groups makes cross site scripting easy

 

user comments
name
email
comments
 
smtp relay check
mailserver:
e-mail:
more info
translate to ...
language:
 
[1] . [2] . [3] . [4] . [5] . [6] . [7] . [8]
EyeonSecurity
Nekromantic
EyeonSecurity Forums
Ob5cureDotCom
elfqrin swg help net security
frame4 security hacker gurus computerglitch
gotr00t b0iler hackinthebox
nekromantic.com astalavista.net wand products
security-protocols
adv-knowledge rootshell wbglinks
security.nnov.ru
 
Copyright © 2001,2002 eyeonsecurity Inc., All Rights Reserved. No portions of eyeonsecurity may be used without express, written permission
 

MSN Groups makes cross site scripting easy

Advisory
   On EyeonSecurity
   Original Post to the security mailing lists

Microsoft's response (for your enjoyment)
   secure_at_microsoft

Exploit
   On EyeonSecurity
   On MSN Groups (you need to sign in 1st)

Original Paper
   On EyeonSecurity

Coverage on Flash sites
   actionscript.com
   Flashcandy(dot)org - the guy commenting doesn't seem to get XSS
   WaxPraxis - quite some discussion. some of the posts are "funny" others veru helpfull
   Macromedia Security bulletin - they had to issue a fix but we have no further information about this