Mahara

  1. Bug #1175446
  2. Comment #2

Comment 2 for bug 1175446

Revision history for this message
Aaron Wells (u-aaronw) wrote :

(master)aaronw@vegas:~/www/moodle2$ curl -H "host:cow\"onerror='alert(1)" vegas.wgtn.cat-it.co.nz/mahara/htdocs
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://cow&quot;onerror='alert(1)/mahara/htdocs/">here</a>.</p>
<hr>
<address>Apache/2.2.20 (Ubuntu) Server at cow&quot;onerror='alert(1) Port 80</address>
</body></html>