Find Security Exploit(s)

gamehead200 · 08-09-2006, 10:34 PM

Hey everyone,

I was wondering if someone with some exploiting knowledge could possibly try exploiting the following script for me as I wouldn't know where to start...

http://siggen.astromike.com/

This is MY webpage just in case anyone was wondering. Wrote the script a few hours ago...

Any help would be appreciated!

sde · 08-09-2006, 10:56 PM

i haven't tried anything, but i did view source and thought this was weird

Code:

<form method="post" name="siggen" action="?validate">

is ?validate actually working as a variable when you submit the form?

gamehead200 · 08-10-2006, 04:50 AM

Quote:

Originally Posted by sde

i haven't tried anything, but i did view source and thought this was weird

Code:

<form method="post" name="siggen" action="?validate">

is ?validate actually working as a variable when you submit the form?

No, that's the page it gets submitted to.

It works!