*** Juan José Pavlik Salles wrote:
 
> As far as i know, that application is not installed on the VM project. Any
> clue???

NVT sends the following requests:

/{amazon,/cgi-bin,/scripts}/search.php?query=1<script>alert(document.cookie);</script>&mode=all

and looks for "<script>alert(document.cookie);</script>"

in the response. 

Micha

-- 
Michael Meyer                            OpenPGP Key: 52A6EFA6
http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-discuss mailing list
[email protected]
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to