Other nomination

Widespread XSS for Google Search Appliance

maluc

maluc's UTF-7 XSS against Google Search Appliance sites, 30 posts all preserved with the eight university and .gov exploit URLs intact. Same live-HTML decode drops <script>alert("XSS")</script> from the opening sentence. Broken blockquote at the WhiteAcid quote leaves quoted text outside the quote. Duplicate of the -full-appliance entry; published empty despite dated posts.

Record

Researcher

maluc

In the archive

• Nominated for the 2006 Top 10 Web Hacking Techniques

Tags

• xss
• charset
• encoding
• filter-bypass
• unicode
• large-scale-scan
• owasp-a02-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of maluc, first published at the original source. Preserved copies are kept so the citation survives its host.