what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from NightHawk

XSS-Cookie-Advisory.txt

Posted Nov 17, 2002

Authored by NightHawk

Cross Site Scripting vulnerabilities exist in the e-mail web services of hotmail.com, yahoo.com, and excite.com. These problems allow for cookie capturing of unsuspecting victims who may easily give up their cookies via clicking on a link in an e-mail or elsewhere and with the link actually pointing to the legitimate site.

tags | exploit, web, vulnerability, xss

SHA-256 | 0e1d0d54940384d01ff7c3049f87a8a7e2540acdafd2a17cb783e60afe5122f5

Download | Favorite | View

lycosxss.txt

Posted Nov 6, 2002

Authored by NightHawk

Lycos.com, the popular search engine and free e-mail site, has a Cross Site Scripting vulnerability that allows an attacker to fool a victim into clicking on a link to Lycos and in turn the attacker can hijack the Cookies of the victim.

tags | exploit, xss

SHA-256 | d1802d7585d53ad58b69f79cc631f0470c55c28d1e28dc48ff19554a808c7ebb

Download | Favorite | View