Re: [Full-disclosure] Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability

2010-08-21 Thread YGN Ethical Hacker Group
It's been completely fixed. Thanks, ad bard guys. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability

2010-08-19 Thread YGN Ethical Hacker Group
Although it seems to have been fixed, it's still vulnerable to Attribute-Based XSS. http://adbard.net/sites/default/modules/ad/serve.php?k=22e342dc6a6a99267a46f18fc5dcecf1&ab_s=18f5d31e3e39e9d3c8d5b850e79d4848&u=http://evil.com?x=%22%20onmouseover=%22alert%28/XSS/%29%22%20%3E

[Full-disclosure] Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability

2010-08-17 Thread YGN Ethical Hacker Group
== Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability == 1. OVERVIEW A famous advertising network for free/open-sou