Webmail horror

[the_JinX]

http://www.hackers4hackers.org/reader.php?h4h=12&page=05 (in dutch)

Multiple webmail systems have XXS (http://www.cgisecurity.com/articles/xss-faq.shtml
) cross-site scripting trouble !!

Lycos XSS/Cookie Advisory:
- http://packetstormsecurity.org/0211-exploits/lycosxss.txt
- http://www.securiteam.com/securitynews/6R0041P60Q.html
- http://www.dsinet.org/?id=3005

Hotmail, Yahoo, Excite Advisory
- http://packetstormsecurity.org/0211-exploits/XSS-Cookie-Advisory.txt
- http://www.securiteam.com/securitynews/6F00C1560Y.html
- http://www.dsinet.org/?id=3033

Source code (perl) of exploit in H4H article above!!