(XSS) SourceForge

[poqun]

SourceForge is a web-based source code repository. It acts as a centralized location for software developers to control and manage free and open source software development. It was the first to offer that service for free to open source projects.

Exploit: SourceForge – Cross Site Scripting
Author: Kwelwild
Target: SourceForge
URL: censored*.sourceforge.net
Tested on: BackTrack 5 r2 – Mozilla Firefox
Proof of Concept:

[/Again/]
Exploit: SourceForge – Cross Site Scripting
Author: Kwelwild
Target: SourceForge
URL: censored*.sourceforge.net
Tested on: BackTrack 5 r2 – Mozilla Firefox
Proof of Concept:

Please, Log in or Register to view URLs content!

 

[worm.exe]

Next time upload the exploited site to zone-h so there is a log of it and we know its not fake.

Thanks

 

[Hure]

Rewards?

 

[KADESHWAR]

Please, Log in or Register to view quote content!

It's important to note that cross-site scripting (XSS) vulnerabilities can pose a significant security risk to web applications, including SourceForge. This type of vulnerability allows attackers to inject malicious code into a website, which can then be executed by unsuspecting users who visit that site. To protect against this type of attack, it's crucial for developers to sanitize all input that is received from users and to properly encode any output that is displayed. Additionally, users can protect themselves by using browser extensions that block or alert them to potentially malicious scripts.