Globelines Website

[dr0le]

---

---

I Really hate Globe website.. there are so many errors!!! and poor online service.
I just found this one xss vulnerability, and i don't know if this is the right forum to post:

This is the proof-of-concept:

http://www.globelines.com.ph/Login.php?username=%22%3E%3Cscript%3Ealert(String. fromCharCode(48,119,110,101,100,32,98,121,32,100,1 14,48,108,101));%3C/script%3E

Well, Globe should be aware of that. :slanted:
or they might end up with a defaced website.

[MirandaSoft]

I Really hate Globe website.. there are so many errors!!! and poor online service.
I just found this one xss vulnerability, and i don't know if this is the right forum to post:

This is the proof-of-concept:

http://www.globelines.com.ph/Login.php?username=%22%3E%3Cscript%3Ealert(String. fromCharCode(48,119,110,101,100,32,98,121,32,100,1 14,48,108,101));%3C/script%3E

Well, Globe should be aware of that. :slanted:
or they might end up with a defaced website.

I use Globelines Broadband and noticed the Globelines website has not been updated since November 2006. After some research, Innove had a retrenchment; their webmasters were laid off and Innove didn't put any money for the budget for contracting webmasters. When Innove took over Globelines, many employees were let go.

Nice find! But Innove is focusing on getting more customers to use their VoIP service before they contract a webmaster for the website.