Old 15th October 2006, 21:08   #1
Vaulner
Junior Member
 
Join Date: Oct 2006
Posts: 2
Winamp web XSS vulnerability

Hi, you have a cross site scripting vulnerability in the search engine, when you search <script>alert(document.cookie)</script>

http://www.winamp.com/videos/search....3C%2Fscript%3E

Fix it

Bye
Vaulner is offline   Reply With Quote
Old 17th October 2006, 14:29   #2
pile0nades
Member
 
Join Date: May 2005
Location: Florida, US
Posts: 88
I can confirm this works.

http://pile0nades.wordpress.com/
pile0nades is offline   Reply With Quote
Old 18th October 2006, 18:01   #3
deppy
Banned
 
deppy's Avatar
 
Join Date: Jul 1982
Location: Arlington, VA
Posts: 306
fixed.
thanks!

Please don't PM me for technical support. Other users can't search through PM's so it does the other users no good.
deppy is offline   Reply With Quote
Old 21st October 2006, 10:49   #4
Vaulner
Junior Member
 
Join Date: Oct 2006
Posts: 2
Vaulner is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Winamp > Winamp Bug Reports

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump