exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

mpaa-xss.txt

mpaa-xss.txt
Posted Dec 6, 2007
Authored by Kristian Hermansen

The MPAA web site suffers from cross site scripting vulnerabilities.

tags | exploit, web, vulnerability, xss
SHA-256 | b8242db2e9de0aa143117b12d1ed5ede37fa7cba62a658fbeacf46f6219df6a6

mpaa-xss.txt

Change Mirror Download
As many of you have heard, the MPAA themselves are violating the GNU
GPL. Such hypocrisy from a company which claims they adhere to
copyrights :-) In protest, I took exactly 7 seconds to locate an XSS
in their website and am posting it for your perusal. Maybe someone
can use it in an email to an MPAA staff member, and perhaps can modify
the payload to steal credentials for some MPAA admin interface. And
perhaps then, after gaining MPAA credentials, this person can modify
the MPAA website. And perhaps after that, we can all laugh at the
MPAA yet again in their quest to sue 12 year old kids for downloading
MP3 files...

There are many more XSS on their site. Everyone knows that if you
find one bug on top (without much effort), there are many more
security issues hiding beneath the surface. I leave it up to the
MPPA-haters out there to dig deeper and use it to "influence" the MPAA
website...

Here's one for the 'txtsearch' search field on the main page at
MPAA.org in the top right-hand corner where it says 'Find the rating
of a film'...
ERR"></tr></table></td><script>alert('xss');</script>
--
Kristian Erik Hermansen
"I have no special talent. I am only passionately curious."

Login or Register to add favorites

File Archive:

February 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Feb 1st
    11 Files
  • 2
    Feb 2nd
    9 Files
  • 3
    Feb 3rd
    5 Files
  • 4
    Feb 4th
    0 Files
  • 5
    Feb 5th
    0 Files
  • 6
    Feb 6th
    9 Files
  • 7
    Feb 7th
    0 Files
  • 8
    Feb 8th
    0 Files
  • 9
    Feb 9th
    0 Files
  • 10
    Feb 10th
    0 Files
  • 11
    Feb 11th
    0 Files
  • 12
    Feb 12th
    0 Files
  • 13
    Feb 13th
    0 Files
  • 14
    Feb 14th
    0 Files
  • 15
    Feb 15th
    0 Files
  • 16
    Feb 16th
    0 Files
  • 17
    Feb 17th
    0 Files
  • 18
    Feb 18th
    0 Files
  • 19
    Feb 19th
    0 Files
  • 20
    Feb 20th
    0 Files
  • 21
    Feb 21st
    0 Files
  • 22
    Feb 22nd
    0 Files
  • 23
    Feb 23rd
    0 Files
  • 24
    Feb 24th
    0 Files
  • 25
    Feb 25th
    0 Files
  • 26
    Feb 26th
    0 Files
  • 27
    Feb 27th
    0 Files
  • 28
    Feb 28th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close