Re: XSS (in 20 chars) in Microsoft IIS 7.5 error message

Posted by A Z on Dec 03

Thank you all for the replies,

Unfortunately, I can no longer really test this (it was on some internal
network, so for example link shortening wouldn’t work), but I wanted to
know if anyone had encountered this stuff before. I should try on a clean
install as suggested – if it works I’ll let you know.

For some unknown reason there was no HTML encoding in this error response,
however the payload was truncated to 20 chars. I googled it…

Leave a Reply