XSS im <title>-Tag?

[HaBo] » Web, Network & Multimedia Palace » (Web-) Design und webbasierte Sprachen » XSS im -Tag? </span> </div> </div> <div class="clearit"> </div> <table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center"> <tr> <td class="alt1" width="100%"><strong>(Web-) Design und webbasierte Sprachen</strong> <span class="smallfont">Tipps & Tricks, Designabgleich, HTML & Javascript, Flash, ASP, PHP, Perl/CGI...</span></td> </tr> </table> <br /> <b><h2>XSS im <title>-Tag?</h2><p id="relevant_replacement" style="font-size: 11px;">Diskussion: <em>XSS im <title>-Tag?</em> im Forum <b>(Web-) Design und webbasierte Sprachen</b>, in der Kategorie Web, Network & Multimedia Palace; ...</p></b> </td> <td valign="top"> <a name="poststop" id="poststop"></a> <table cellpadding="0" cellspacing="0" border="0" width="100%" style="margin-bottom:3px"> <tr valign="bottom"> <td class="smallfont"><a href="http://www.hackerboard.de/newreply.php?do=newreply&noquote=1&p=" rel="nofollow"><img src="http://www.hackerboard.de/images/habo/buttons/threadclosed.gif" alt="Thema geschlossen" border="0" /></a></td> </tr> </table> <div class="tcat acat"><div class="left"><div class="right"> <div class="fright"> <a id="threadtools" href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html#goto_threadtools">Themen-Optionen</a> <a id="displaymodes" href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html#goto_displaymodes">Ansicht</a> </div> <span class="smallfont"> </span> </div></div></div> <div id="posts"><div id="lastpost"></div></div> <table cellpadding="0" cellspacing="0" border="0" width="100%" style="margin-top:-2px"> <tr valign="top"> <td class="smallfont"><a href="http://www.hackerboard.de/newreply.php?do=newreply&noquote=1&p=" rel="nofollow"><img src="http://www.hackerboard.de/images/habo/buttons/threadclosed.gif" alt="Thema geschlossen" border="0" /></a></td> </tr> </table> <table id="post_ad" class="tborder" cellpadding="6" cellspacing="0" border="0" width="100%" align="center" style="margin-bottom:6px;"> <tr> <td class="thead" style="font-weight:normal; border: 1px solid #D1D1E1; border-right: 0px" > </td> <td class="thead" style="font-weight:normal; border: 1px solid #D1D1E1; border-left: 0px" align="right"> </td> </tr> <tr valign="top"> <td class="alt2" width="175" style="border: 1px solid #D1D1E1; border-top: 0px; border-bottom: 0px"> <div> <a class="bigusername" href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html#post_ad">Anzeige</a> </div> </td> <td class="alt1" id="td_post_66" style="border-right: 1px solid #D1D1E1"> <div id="post_message_ad"> <span style="color:#646464">- Anzeige -</span> <br \> <h3> <script type="text/javascript"> </script> <script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"> </script> </h3> </div> </td> </tr> <tr> <td class="alt2" style="border: 1px solid #D1D1E1; border-top: 0px"> <img class="inlineimg" src="http://www.hackerboard.de/images/statusicon/user_online.gif" alt="Werbung ist gerade online" border="0" /> </td> <td class="alt1"> </td> </tr> </table> <br /> <a href="http://www.hackerboard.de/" accesskey="1">[HaBo]</a></span> » <a href="http://www.hackerboard.de/#web-network-multimedia-palace">Web, Network & Multimedia Palace</a> » <a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/">(Web-) Design und webbasierte Sprachen</a> » <span class="last"> XSS im <title>-Tag? </span> <br /> <div class="smallfont" align="center"> <strong>«</strong> <a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag-prev-thread.html" rel="nofollow">Vorheriges Thema</a> | <a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag-next-thread.html" rel="nofollow">Nächstes Thema</a> <strong>»</strong> </div> <table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center" style="border-top-width:0px"> <tr> <td class="thead" colspan="2">Themen-Optionen<a name="goto_threadtools"></a></td> </tr> <tr valign="top"> <td class="alt1" colspan="2"> <div class="smallfont"> <div><img class="inlineimg" src="http://www.hackerboard.de/images/habo/buttons/printer.gif" alt="Druckbare Version zeigen" vspace="1" /> <a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag-print.html" rel="nofollow">Druckbare Version zeigen</a></div> <div><img class="inlineimg" src="http://www.hackerboard.de/images/habo/buttons/sendtofriend.gif" alt="Jemanden per E-Mail auf dieses Thema hinweisen" vspace="1" /> <a href="http://www.hackerboard.de/sendmessage.php?do=sendtofriend&t=32656" rel="nofollow">Jemanden per E-Mail auf dieses Thema hinweisen</a></div> </div> </td> </tr> <tr> <td class="thead" colspan="2">Ansicht<a name="goto_displaymodes"></a></td> </tr> <tr valign="top"> <td class="alt2" colspan="2"> <div class="smallfont"> <div><img class="inlineimg" src="http://www.hackerboard.de/images/habo/buttons/mode_linear.gif" alt="Linear-Darstellung" vspace="1" /> <strong>Linear-Darstellung</strong></div> <div><img class="inlineimg" src="http://www.hackerboard.de/images/habo/buttons/mode_hybrid.gif" alt="Hybrid-Darstellung" vspace="1" /> <a rel="nofollow" href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html?mode=hybrid">Zur Hybrid-Darstellung wechseln</a></div> <div><img class="inlineimg" src="http://www.hackerboard.de/images/habo/buttons/mode_threaded.gif" alt="Baum-Darstellung" vspace="1" /> <a rel="nofollow" href="http://www.hackerboard.de/showthread.php?p=&mode=threaded#post">Zur Baum-Darstellung wechseln</a></div> </div> </td> </tr> </table> <br /> <table cellpadding="0" cellspacing="0" border="0" width="100%" align="center"> <tr valign="bottom"> <td width="100%" valign="top"> <table class="tborder" cellpadding="5" cellspacing="0" border="0" width="210"> <thead> <tr> <td class="thead"> <a style="float:right" href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html#top" onclick="return toggle_collapse('forumrules')"><img id="collapseimg_forumrules" src="http://www.hackerboard.de/images/habo/buttons/collapse_thead.gif" alt="" border="0" /></a> Forumregeln </td> </tr> </thead> <tbody id="collapseobj_forumrules" style=""> <tr> <td class="alt1" nowrap="nowrap"><div class="smallfont"> <div>Es ist Ihnen <strong>nicht erlaubt</strong>, neue Themen zu verfassen.</div> <div>Es ist Ihnen <strong>nicht erlaubt</strong>, auf Beiträge zu antworten.</div> <div>Es ist Ihnen <strong>nicht erlaubt</strong>, Anhänge hochzuladen.</div> <div>Es ist Ihnen <strong>nicht erlaubt</strong>, Ihre Beiträge zu bearbeiten.</div> <hr /> <div><a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=bbcode" target="_blank">BB-Code</a> ist <strong>an</strong>.</div> <div><a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=showsmilies" target="_blank">Smileys</a> sind <strong>an</strong>.</div> <div><a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=bbcode#imgcode" target="_blank">[IMG]</a> Code ist <strong>an</strong>.</div> <div>HTML-Code ist <strong>aus</strong>.</div><div><a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=linkbacks#trackbacks" target="_blank">Trackbacks</a> sind <strong>aus</strong></div> <div><a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=linkbacks#pingbacks" target="_blank">Pingbacks</a> sind <strong>aus</strong></div> <div> <a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=linkbacks#refbacks" target="_blank">Refbacks</a> sind <strong>aus</strong></div> <hr /> <div><a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=showrules" target="_blank">Foren-Regeln</a></div> </div></td> </tr> </tbody> </table> </td> <td class="smallfont" align="right"> <table cellpadding="0" cellspacing="0" border="0"> <tr> <td> </td> </tr> </table> </td> </tr> </table> <br /> <table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center"> <thead> <tr> <td class="tcat" width="100%" colspan="5"> <a style="float:right" href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html#top" onclick="return toggle_collapse('similarthreads')"><img id="collapseimg_similarthreads" src="http://www.hackerboard.de/images/habo/buttons/collapse_tcat.gif" alt="" border="0" /></a> Ähnliche Themen<a name="similarthreads"></a> </td> </tr> </thead> <tbody id="collapseobj_similarthreads" style=""> <tr class="thead" align="center"> <td class="thead" width="40%">Thema</td> <td class="thead" width="15%" nowrap="nowrap">Autor</td> <td class="thead" width="20%">Forum</td> <td class="thead" width="5%">Antworten</td> <td class="thead" width="20%">Letzter Beitrag</td> </tr> <tr> <td class="alt1" align="left"> <span class="smallfont"> <a href="http://www.hackerboard.de/webmaster-security/32654-xss-im-title-tag.html" title="Hallo zusammen! Ich arbeite zur Zeit gerade an meiner Maturarbeit und muss jetzt mal noch den Sicherheitsaspekt beschreiben. Ich habe eine Website...">XSS im <title>-Tag?</a></span> </td> <td class="alt2" nowrap="nowrap"><span class="smallfont">parkouma</span></td> <td class="alt1" nowrap="nowrap"><span class="smallfont">Webmaster-Security</span></td> <td class="alt2" align="center"><span class="smallfont">6</span></td> <td class="alt1" align="right"><span class="smallfont">13.11.07 <span class="time">14:40</span></span></td> </tr> <tr> <td class="alt1" align="left"> <span class="smallfont"> <a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/7964-wie-bekomm-ich-ein-ascii-zeichen-title.html" title="Hi also Wie bekomm ich ein ASCII zeichen in den Title also ich letztens bei google was suchte fand sah ich eine Seite die im Title ein ASCII...">Wie bekomm ich ein Ascii zeichen in title</a></span> </td> <td class="alt2" nowrap="nowrap"><span class="smallfont">Aufsicht</span></td> <td class="alt1" nowrap="nowrap"><span class="smallfont">(Web-) Design und webbasierte Sprachen</span></td> <td class="alt2" align="center"><span class="smallfont">5</span></td> <td class="alt1" align="right"><span class="smallfont">19.01.04 <span class="time">21:36</span></span></td> </tr> <tr> <td class="alt1" align="left"> <span class="smallfont"> <a href="http://www.hackerboard.de/windows/6801-kein-sound-unter-xp-title-boppy.html" title="Hi Leutz, jeden Tag ein neues Prob mit WinXP - ist das nicht schön? Mein Sound funzt unter WinXP nicht mehr, den der Hardwaremanager...">Kein Sound unter XP [title by boppy]</a></span> </td> <td class="alt2" nowrap="nowrap"><span class="smallfont">MoD</span></td> <td class="alt1" nowrap="nowrap"><span class="smallfont">Windows</span></td> <td class="alt2" align="center"><span class="smallfont">6</span></td> <td class="alt1" align="right"><span class="smallfont">15.11.03 <span class="time">14:07</span></span></td> </tr> </tbody> </table> <br /> <div id="footer-text"> Alle Zeitangaben in WEZ +2. Es ist jetzt <span class="time">18:10</span> Uhr.<br /> vBulletin® v3.8.7, Copyright ©2000-2012, vBulletin Solutions, Inc. </div> <div id="rounded-bottom"><span></span></div> </div> <form action="http://www.hackerboard.de/" method="get"> <div id="footer"> <ul> <li><a href='http://www.hackerboard.de/impressum.php'>Impressum</a></li> - <li><a href="http://www.hackerboard.de/sendmessage.php" rel="nofollow" accesskey="9">Kontakt</a></li> <li><a href="http://www.hackerboard.de">Hackerboard.de</a></li> <li><a href="http://www.hackerboard.de/sitemap/">Archiv</a></li> <li><a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html#top" onclick="self.scrollTo(0, 0); return false;">Nach oben</a></li> </ul> <select name="styleid" onchange="switch_id(this, 'style')"> <optgroup label="Style auswählen"> <option value="8" class="" selected="selected">-- HaBo 2.0</option> <option value="2" class="" >-- Z Series - Blue</option> <option value="1" class="" >-- HaBo Original</option> </optgroup> </select> </div> </form> </div> <div style="display:none;"><script type="text/javascript"> </script><script type="text/javascript"> </script><noscript><div id="naeXTReMe"><img height="1" width="1" alt="" src="http://nht-2.extreme-dm.com/n3.g?login=throjan&pid=REPLACE&j=n&jv=n&auto=y" /> </div></noscript></div> <script type="text/javascript">  </script> <div style="display:none"> </div> <div class="vbmenu_popup" id="linkbacktools_menu" style="display:none"> <table cellpadding="4" cellspacing="1" border="0"> <tr> <td class="thead">LinkBack<a name="goto_linkback"></a></td> </tr> <tr> <td class="vbmenu_option"><img class="inlineimg" src="http://www.hackerboard.de/vbseo/resources/images/forum/linkback_url.gif" alt="LinkBack URL" /> <a href="http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html" onclick="prompt('Use the following URL when referencing this thread from another forum or blog.','http://www.hackerboard.de/web-design-und-webbasierte-sprachen/32656-xss-im-title-tag.html');return false;">LinkBack URL</a></td> </tr> <tr> <td class="vbmenu_option"><img class="inlineimg" src="http://www.hackerboard.de/vbseo/resources/images/forum/linkback_about.gif" alt="About LinkBacks" /> <a rel="nofollow" href="http://www.hackerboard.de/misc.php?do=linkbacks">About LinkBacks</a></td> </tr> </table> </div> <br /><div style="z-index:3" class="smallfont" align="center"><a href="http://www.hackerboard.de/sitemap/f-11.html">1</a> <a href="http://www.hackerboard.de/sitemap/f-24.html">2</a> <a href="http://www.hackerboard.de/sitemap/f-58.html">3</a> <a href="http://www.hackerboard.de/sitemap/f-25.html">4</a> <a href="http://www.hackerboard.de/sitemap/f-57.html">5</a> <a href="http://www.hackerboard.de/sitemap/f-26.html">6</a> <a href="http://www.hackerboard.de/sitemap/f-19.html">7</a> <a href="http://www.hackerboard.de/sitemap/f-17.html">8</a> <a href="http://www.hackerboard.de/sitemap/f-18.html">9</a> <a href="http://www.hackerboard.de/sitemap/f-73.html">10</a> <a href="http://www.hackerboard.de/sitemap/f-20.html">11</a> <a href="http://www.hackerboard.de/sitemap/f-64.html">12</a> <a href="http://www.hackerboard.de/sitemap/f-13.html">13</a> <a href="http://www.hackerboard.de/sitemap/f-69.html">14</a> <a href="http://www.hackerboard.de/sitemap/f-70.html">15</a> <a href="http://www.hackerboard.de/sitemap/f-71.html">16</a> <a href="http://www.hackerboard.de/sitemap/f-14.html">17</a> <a href="http://www.hackerboard.de/sitemap/f-72.html">18</a> <a href="http://www.hackerboard.de/sitemap/f-12.html">19</a> <a href="http://www.hackerboard.de/sitemap/f-67.html">20</a> <a href="http://www.hackerboard.de/sitemap/f-53.html">21</a> <a href="http://www.hackerboard.de/sitemap/f-15.html">22</a> <a href="http://www.hackerboard.de/sitemap/f-16.html">23</a> <a href="http://www.hackerboard.de/sitemap/f-55.html">24</a> <a href="http://www.hackerboard.de/sitemap/f-61.html">25</a> <a href="http://www.hackerboard.de/sitemap/f-65.html">26</a> <a href="http://www.hackerboard.de/sitemap/f-21.html">27</a> <a href="http://www.hackerboard.de/sitemap/f-22.html">28</a> <a href="http://www.hackerboard.de/sitemap/f-47.html">29</a> <a href="http://www.hackerboard.de/sitemap/f-23.html">30</a> <a href="http://www.hackerboard.de/sitemap/f-59.html">31</a> <a href="http://www.hackerboard.de/sitemap/f-35.html">32</a> <a href="http://www.hackerboard.de/sitemap/f-38.html">33</a> <a href="http://www.hackerboard.de/sitemap/f-39.html">34</a> <a href="http://www.hackerboard.de/sitemap/f-37.html">35</a> <a href="http://www.hackerboard.de/sitemap/f-36.html">36</a> <a href="http://www.hackerboard.de/sitemap/f-56.html">37</a> <a href="http://www.hackerboard.de/sitemap/f-68.html">38</a> <a href="http://www.hackerboard.de/sitemap/f-77.html">39</a> <a href="http://www.hackerboard.de/sitemap/f-41.html">40</a> <a href="http://www.hackerboard.de/sitemap/f-43.html">41</a> <a href="http://www.hackerboard.de/sitemap/f-42.html">42</a> <a href="http://www.hackerboard.de/sitemap/f-44.html">43</a> <a href="http://www.hackerboard.de/sitemap/f-45.html">44</a> <a href="http://www.hackerboard.de/sitemap/f-48.html">45</a> <a href="http://www.hackerboard.de/sitemap/f-34.html">46</a> <a href="http://www.hackerboard.de/sitemap/f-10.html">47</a> <a href="http://www.hackerboard.de/sitemap/f-75.html">48</a> <a href="http://www.hackerboard.de/sitemap/f-31.html">49</a> <a href="http://www.hackerboard.de/sitemap/f-78.html">50</a> <a href="http://www.hackerboard.de/sitemap/f-33.html">51</a> <a href="http://www.hackerboard.de/sitemap/f-30.html">52</a> <a href="http://www.hackerboard.de/sitemap/f-27.html">53</a> <a href="http://www.hackerboard.de/sitemap/f-60.html">54</a> <a href="http://www.hackerboard.de/sitemap/f-50.html">55</a> <a href="http://www.hackerboard.de/sitemap/f-51.html">56</a> <a href="http://www.hackerboard.de/sitemap/f-52.html">57</a> <a href="http://www.hackerboard.de/sitemap/f-76.html">58</a> <a href="http://www.hackerboard.de/sitemap/f-32.html">59</a> <a href="http://www.hackerboard.de/sitemap/f-66.html">60</a> <a href="http://www.hackerboard.de/sitemap/f-62.html">61</a> </div> <script type="text/javascript"> //<![CDATA[ window.orig_onload = window.onload; window.onload = function() { var cpost=document.location.hash.substring(1);var cpost2='';if(cpost){ var ispost=cpost.substring(0,4)=='post';if(ispost)cpost2='post_'+cpost.substring(4);if((cobj = fetch_object(cpost))||(cobj = fetch_object(cpost2))){cobj.scrollIntoView(true);}else if(ispost){cpostno = cpost.substring(4,cpost.length);if(parseInt(cpostno)>0){location.replace('http://www.hackerboard.de/showthread.php?p='+cpostno);};} } if(typeof window.orig_onload == "function") window.orig_onload(); } //]]> </script> </body> </html>