From: http://smcv.pseudorandom.co.uk/ Date: Mon, 30 Mar 2015 10:56:25 +0000 (-0400) Subject: fix formatting X-Git-Tag: 3.20150610~124 X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/commitdiff_plain/7da5085589208573b16afd8a9516cffede43e18c?ds=sidebyside fix formatting --- diff --git a/doc/bugs/XSS_Alert...__33____33____33__.mdwn b/doc/bugs/XSS_Alert...__33____33____33__.mdwn index 436e3faae..2c147073a 100644 --- a/doc/bugs/XSS_Alert...__33____33____33__.mdwn +++ b/doc/bugs/XSS_Alert...__33____33____33__.mdwn @@ -5,14 +5,16 @@ Vulnerable Links: webconverger.org/ikiwiki.cgi?action=verify&do=signin&openid_identifier=1 How To Reproduce The Vulnerability : + 1. Go to this link : webconverger.org/ikiwiki.cgi?action=verify&do=signin&openid_identifier=1 2. refresh the page and intercept the http request using "brup suite" then at parameter "openid_identifier=" put xss payload 3. forward the request XSS Payload : -1. "> -2. "> -3. "> + +1. `">` +2. `">` +3. `">` NOTE : Proof of concept is attached.