[FD] XSS on public PGP servers

[John Strander <tech.pain@xxxxxxxxxx>]

<div>This isn't a top story news flash or anything, but I was doing a search 
for someone's PGP key and dI iscovered a bunch of XSS on several of the public 
key servers:</div><div> </div><div><a 
href="http://pgp.mit.edu/pks/lookup?search=ckers&amp;op=index";>http://pgp.mit.edu/pks/lookup?search=ckers&amp;op=index</a></div><div>
 </div><div><a 
href="https://sks-keyservers.net/pks/lookup?op=vindex&amp;search=ckers";>https://sks-keyservers.net/pks/lookup?op=vindex&amp;search=ckers</a></div><div>
 </div><div> </div>

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/