Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Q and A for any cross site scripting information. Feel free to ask away. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
alert in ie8 help
Posted by: VMw4r3
Date: April 08, 2011 01:21PM

I've never used ie8.

Is it possible to get xss alert without getting that warning from ie8.

http://www.oxegen.ie/?s=<SCRIPT>alert(document.cookie)</SCRIPT>

It works on ff3, ff4, and chrome.

Options: ReplyQuote
Re: alert in ie8 help
Posted by: Albino
Date: April 09, 2011 07:15AM

Since the XSS vector is so simple, the site may be vulnerable to stored XSS. I don't think IE8/9 can detect that.

Options: ReplyQuote


Sorry, only registered users may post in this forum.