I wrote this last night. It is my first ever article. If people like it I may start writing articles more regularly Constructive criticism welcome.

http://www.gulftech.org/?node=article&arti...=00050-09182004

Please note that the eBay and HBO vulns do not work anymore, as i released the LiveWorld advisory a while ago so they have been patched. The others do work though

nice article !

Yes, you should always filter heavily any user input that gets reflected back to the user...these developers should be testing it every time they add a new variable.

-niko

Thanks very much niko

And yes, I agree. I just sent this to BugTraq, so maybe some of the developers can learn from their mistakes. I hope they do because as I wrote in my BugTraq post:

Its real good..
Keep up the good work
!~Regards
FM