IN THE NAME OF:
( ( (
( ( ( ) )) ) ( ) )
( )( ) ( ) (()/(()/(( )(()/(
)((_)((_))((_) /(_))(_))((_)/(_))
((_)_(_)_((_)_ (_))(_))((_)_(_))
| _ ) _ )/ _ | _ _ _|| _ ) __|
| _ _ (_) | | /| | | _ __
|___/___/___ |_|____||___/___/
[»] Author: [ G4N0K the Tard ]
NatterChat 1.12 txtUsername and txtRoomName XSS
Register new user with on register.asp with
"<script>alert(document.cookie)</script>" as the username (txtUsername
post parameter).
Create new chatroom with "<script>alert(document.cookie)</script>" as
the room name (txtRoomName post parameter)
demo:
http://www.natterchat.co.uk/version112/home.asp
===[ Greetz ]===
[»] BBQ RIBS
[»] Fat Back Mac and the BBQ Gang
[»] Tyler Trioxide
[»] XoRLu
[»] HUSSAIN-Z
//Are ya looking for something that has plenty of BUGz...!? I know
it... It's a old plate of BBQ in the corner of G4N0K's hut [:-)
//BBQ RIBS,forgimme...
