The page navigation mechanism (?page=blah.php) records the page name in a log. We can pass HTML in the page name to create 'phantom' log entries.
</td><td>2016-08-31 12:34:56</td></tr><tr><td>127.0.0.1</td><td>127.0.0.1</td><td>Windoze 3.1/Nescape Navigator</td><td>User exploded
</td><td>2016-08-31 12:34:56</td></tr><tr><td>127.0.0.1</td><td>127.0.0.1</td><td>Windoze 3.1/Nescape Navigator</td><td>User exploded
No comments:
Post a Comment