Cross Site Scripting Vulnerability in Speed Bit Search Engine

0
77

Cross Site Scripting Vulnerability in Speed Bit Search Engine

Debasish Mandal, A hacker from India , Found that there is a XSS through JavaScript Injection vulnerability in the Home page of Speed Bit Search Engine.The XSS filter is filtering normal html /script /iframe tags but XSS can be achieved by injecting JavaScript event « onmouseover() ».Technical Description is below. Debasish have

Source: Cross Site Scripting Vulnerability in Speed Bit Search Engine