Posted by Jim Higson on 01/27/39 11:54

FFMG wrote:

> Someone inserted a comment on my site, (I removed the page so I cannot
> really give you a link)
>
> The bad part is.
>
> ...
> <FONT face=&#21326;&#25991;&#34892;&#26999;
>
color=#ff0000>&#36827;&#20837;&#20845;&#21512;&#24425;&#22235;&#32918;&#21333;&#21452;&#23614;&#25968;&#22823;&#20844;&#24320;</FONT>
> ...
>
> And it looks ugly in FF1.5 but it brings the page down in IE.
>
> So I guess the guy is trying to do something nasty, but what can it be?
>
> Any ideas?

You first stage in working out should be to decode all those entity
references. Probably they include some javascript or something like that.

--
Jim

• Next in forum: Re: Html injection/hacking, but what does it do? Any advice?
• Prev in forum: Re: Post RSS feed w/o RSS-to-Javascript.com
• Thread view: Re: Html injection/hacking, but what does it do? Any advice?

[Reply to this message]