XSS on pear.php.net
| From: | Peter Suschlik | Date: | Tue, 14 Jan 2003 21:36:43 +0000 |
| Subject: | XSS on pear.php.net | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-15021@lists.php.net to get a copy of this message | ||
Hi,
while trying `
pear'' on the command line I tried to `get'' manually
and tried this:
http://pear.php.net/get/<a
href="javascript:alert(23)">
OK, it isn't serious (<script> does not work), but anyway.
I just want you to tell and thank you and other contributers to PEAR
for PEAR :)
Regards
Peter Suschlik
P.S.: Sorry, for the crossposts, but I couldn't find the "real" email
address.