What's new
By:
Filters

XSS Vulnerability in Google Code site

dan-ger-ous

dan-ger-ous

VIP Member
Untitled.png


XSS (Cross site Scripting)Vulnerability discovered in Google Code website as shown. Claimed to be Discovered by Vansh Sharma & Vaibhuv Sharma.

Proof Of Concept: Just go to
Code: 
http://code.google.com/apis/ajax/playground/
and then click on edit HTML after that remove all the codes and type this script : <img src="<img src=search"/onerror=alert("XSS")//"> and click on DEBUG CODE, and then first it will show you "Sample must have <head> element" click OK and wait for the window to load if nothing happen then try the same thing again or simply you can click on RUN CODE, and you will get a popup which is XSS.
 
You must log in or register to reply here.
Back
Top