Cross-Site Scripting on your site (www.php.net)
| From: | office | Date: | Thu, 02 May 2002 05:11:02 +0000 |
| Subject: | Cross-Site Scripting on your site (www.php.net) | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-9981@lists.php.net to get a copy of this message | ||
My name is 'office', an Internet user, (not a hacker).
I have found the vulnerability of cross-site scripting on your site,
so report it.
You can recognize the vulnerability with the URL
http://www.php.net/cal.php?id=76&cy="><script>alert("hello")</script>
and that prove that any (malicious) script code is possible as PHP.net web page.
If you want to know more about corss-site scripting, you can refer
http://www.cert.org/advisories/CA-2000-02.html
This vulnerability in your site and your reaction for this report will
be published by me adequately.
Thanks,
--
office
office@ukky.net
http://www.office.ac/