Timeline for Is it possible to forge post request and bypass maxlength in input box?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 18, 2012 at 19:46 | comment | added | Piskvor left the building | @user1203028: "whats the point of vulnerabilty if you can't recreate it without tool" - I'm pretty sure you aren't whistling the ZMODEM protocol at 300 baud into an acoustic coupler ;) You're already using an extremely complex stack of tools (from the silicon through the OS through TCP/IP to the browser itself). Adding one more layer into the mix isn't making it significantly more complex. | |
| Jun 18, 2012 at 17:16 | vote | accept | Daniel | ||
| Jun 18, 2012 at 17:16 | comment | added | Daniel | Kapish thanks a lot , i got it working now , so stupid of me not to think of that. I got it working now , can't thank you enough.Thanks again :) | |
| Jun 18, 2012 at 17:13 | history | edited | Majoris | CC BY-SA 3.0 |
added 369 characters in body
|
| Jun 18, 2012 at 17:09 | comment | added | Majoris |
How are you running this exploit? Are you sure the server is vulnerable to XSS? I think you need to improve the javascript you are using to exploit XSS. onmouseover="alert(0) cannot exploit XSS, it is just a DOM based local action to client browser, onmouseover will not send the input to the server to get returned back to the client. Your javascript must be sent to http://www.site.rs/usersearch.php and returned back by the server.
|
|
| Jun 18, 2012 at 17:07 | comment | added | Daniel | Yes it is , I can break out with "> and create xss alert with <img onerror=alert(0) src=x> , I used temper data , but whats the point of vulnerabilty if you can't recreate it without tool. Maxlength is killing me. | |
| Jun 18, 2012 at 16:54 | comment | added | Daniel | Please take a look at updated post.Thanks for answering. | |
| Jun 18, 2012 at 16:28 | history | edited | Majoris | CC BY-SA 3.0 |
deleted 21 characters in body
|
| Jun 18, 2012 at 16:22 | history | answered | Majoris | CC BY-SA 3.0 |