Skip to main content
T
thepolarexpress
Known Participant
August 26, 2008
Question

XSS vulnerability

  • August 26, 2008
  • 2 replies
  • 415 views
I able to embed following text successfully even applying scriptProtect=all.

>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(392271)>

Anybody have any cfm script to strip out above character, I have scipt which remove <script> tag but could not detect above tag.

Any help will appreciable

thanks
amar Piwar
This topic has been closed for replies.

2 replies

D
Dan_Bracuk
Inspiring
August 26, 2008
try safetext() at cflib.org.

it may work, it may not.
A
Anonymous
August 26, 2008
Try this code out
T
thepolarexpressAuthor
Known Participant
September 4, 2008
>"><%00script>alert(85472)</script>

How I can detect above string in user input. The code given provided in last reply works well wither other vlunarabilities but not with >"><%00script>alert(85472)</script>

Your help needed. Thanks in advance

~~~ Thanks
the polar express
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices