Skip to content

Instantly share code, notes, and snippets.

@MiguelBel

MiguelBel/ForoAsturias.es

Last active August 29, 2015 14:05
Show Gist options
  • Save MiguelBel/e3c27fa4ac5fc60d11cb to your computer and use it in GitHub Desktop.
Save MiguelBel/e3c27fa4ac5fc60d11cb to your computer and use it in GitHub Desktop.
Download ZIP
XSS in spanish politic party Foro Asturias
Raw
ForoAsturias.es
Soy un aficionado a las auditorias de seguridad y he encontrado una vulnerabilidad en su web, permite ejecutar código javascript externo.
La prueba de concepto es esta url:
http://www.foroasturias.es/buscar/Hola');alert('xss
Para solucionarlo deben escapar correctamente los parámetros de consulta.
Un saludo.
@MiguelBel
Copy link
Author

Solved and answered 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment