04/12/03, 18:30
Vulnerability: XSS vulnerabilities in register.asp
Description: The registration form in register.asp does not properly sanitize user input. This means a malicious user can place script into the form fields when they register. The script is stored in the database intact and is called and executed when t
he data is to be displayed.
Exploit: The exploit was proven with a test script placed into several of the form’s fields.
<script>alert("test")</script>
Solution: The developer needs to properly sanitize user input in the register.asp form.
Credit: CyberArmy Application and Code Auditing Team
Parag0d
The developer was contacted regarding this matter, but never gave a reply.
Description: The registration form in register.asp does not properly sanitize user input. This means a malicious user can place script into the form fields when they register. The script is stored in the database intact and is called and executed when t
he data is to be displayed.
Exploit: The exploit was proven with a test script placed into several of the form’s fields.
<script>alert("test")</script>
Solution: The developer needs to properly sanitize user input in the register.asp form.
Credit: CyberArmy Application and Code Auditing Team
Parag0d
The developer was contacted regarding this matter, but never gave a reply.