Skip to content

SSCHADV2012-026 - www.parship.de - Cross-site Scripting vulnerability

Advisory:
www.parship.de – Cross-site Scripting vulnerability
Advisory ID:
SSCHADV2012-026
Author:
Stefan Schurtz
Affected Software:
Successfully tested on www.parship.de
Vendor URL:
Vendor Status:
fixed
 
======================
Vulnerability Description
======================
 
http://www.parship.de is prone to a Cross-site Scripting vulnerability
 
Continue reading "SSCHADV2012-026 - www.parship.de - Cross-site Scripting vulnerability"

SSCHADV2012-027 - www.datingcafe.de - Cross-site Scripting vulnerability

Advisory:
www.datingcafe.de – Cross-site Scripting vulnerability
Advisory ID:
SSCHADV2012-027
Author:
Stefan Schurtz
Affected Software:
Successfully tested on www.datingcafe.de
Vendor URL:
Vendor Status:
fixed
 
======================
Vulnerability Description
======================
 
http://www.datingcafe.de is prone to a Cross-site Scripting vulnerability
 
Continue reading "SSCHADV2012-027 - www.datingcafe.de - Cross-site Scripting vulnerability"

Shame on me ;-)

I totally forget to publish my Security Advisory about some Cross-Site Request Forgery & Cross-site Scripting vulnerabilities on http://t-online.de. So I published it today.
 
And here is the link to the advisory SSCHADV2012-099 and here are some pictures about the XSS by html file (1, 2), txt file (1, 2, 3) and two videos about the CSRF vulnerabilities :)
 
Continue reading "Shame on me ;-)"

SSCHADV2012-099 - t-online.de eMail Center - Cross-Site Request Forgery & Cross-site Scripting vulnerabilities

Advisory:
t-online.de eMail Center – Cross-Site Request Forgery  & XSS vulnerabilities
Advisory ID:
SSCHADV2012-099
Author:
Stefan Schurtz
Affected Software:
Successfully tested on email.t-online.de
Vendor URL:
Vendor Status:
fixed
 
======================
Vulnerability Description
======================
 
http://email.t-online.de is prone to multiple CSRF and XSS vulnerabilities
 
Continue reading "SSCHADV2012-099 - t-online.de eMail Center - Cross-Site Request Forgery & Cross-site Scripting vulnerabilities"

SSCHADV2012-024 - elitepartner.de Cross-site Scripting vulnerability

Advisory:
www.elitepartner.de – Cross-site Scripting vulnerability
Advisory ID:
SSCHADV2012-024
Author:
Stefan Schurtz
Affected Software:
Successfully tested on www.elitepartner.de
Vendor URL:
Vendor Status:
fixed
 
======================
Vulnerability Description
======================
 
http://www.elitepartner.de is prone to a XSS vulnerability
 
Continue reading "SSCHADV2012-024 - elitepartner.de Cross-site Scripting vulnerability"
Imprint | Contact | Privacy Statement