+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS] NASA.gov (/showthread.php?tid=4094524)
[XSS] NASA.gov - haqqur - Mar 3, 2014
So I saw everyone bragging about some XSS vulnerabilities they found, so I decided I'd post a few, because they really aren't hard to find...
Anyways, here it is:
Code
http://scienceandtechnology.jpl.nasa.gov/search/?searchcriteria=Code
http://scienceandtechnology.jpl.nasa.gov/search/?searchcriteria="/><h1>Easy</h1>There are a few filters set in place to try and block all Javascript, but they're not hard to bypass.
* - madcodE_ - Mar 10, 2014
well there are dozens of xss bugs in NASA domains..
;) ...
question is. what you gonna do with this thing :p ??
* - Bob23 - Mar 10, 2014
"There are a few filters set in place to try and block all Javascript, but they're not hard to bypass."
They're hard enough to stop your skid ass from bypassing them, which is precisely why you only posted an HTMLi lmao.
* - ๖ۣۜXilluX - Mar 10, 2014
Nice, recently I have found one in NASA Website, too.