Hey guys,
thought i should bring this to your attention, mediafire currently has a Cross site scripting vulnerability:
Mediafire.com suffers from a persistent XSS vulnerability within its file uploads.
After a user has uploaded their file they can change the title of the file.
To something like
<script>alert('CodeineIntra')</script> .txt
It must contain an extension to save.
This is a persistent vulnerability.
Source: http://packetstormsecurity.org/files/view/104288/mediafire-xss.txt
make sure you be careful if mediafire does anything unexpected, always check the title of the page to see if there is any javascript or obfuscated code (filename is in the title), if you're downloading anything make sure it's coming from mediafire as it's now possible to send the download location to somewhere foreign
filenames can be switched around even after the upload, so use mediafire with care.
thought i should bring this to your attention, mediafire currently has a Cross site scripting vulnerability:
Mediafire.com suffers from a persistent XSS vulnerability within its file uploads.
After a user has uploaded their file they can change the title of the file.
To something like
<script>alert('CodeineIntra')</script> .txt
It must contain an extension to save.
This is a persistent vulnerability.
Source: http://packetstormsecurity.org/files/view/104288/mediafire-xss.txt
make sure you be careful if mediafire does anything unexpected, always check the title of the page to see if there is any javascript or obfuscated code (filename is in the title), if you're downloading anything make sure it's coming from mediafire as it's now possible to send the download location to somewhere foreign
filenames can be switched around even after the upload, so use mediafire with care.
