cross-site scripting

a111087 · Dec 15, 2008, 12:53 AM

No script filters cross-site scripting on techpowerup.com
Then page is transferred to
http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1

Any explanation?

W1zzard · Dec 15, 2008, 07:43 AM

uh?

a111087 · Dec 15, 2008, 03:56 PM

that's what I said, but it did it to me a few times already

W1zzard · Dec 15, 2008, 06:22 PM

can you explain what you are doing and what happens?

a111087 · Dec 15, 2008, 06:44 PM

When I go to techpowerup.com (using Firefox 3.0.4) I sometimes (about 30% of the time) get this:

this is what no script console shows:

Right after that I got the message from Adobe reader saying it can't open pdf file in firefox because ... well, I just can't get it to work with latest firefox. Then page is transfered to the link below:
http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1

That is all. I don't know what that is. I'm probably making too big of a deal out of it.

Oh, and no-script is set to allow all script and it still does it.

Fitseries3 · Dec 15, 2008, 06:51 PM

you must have some sorta virus/worm/spyware/etc.

W1zzard · Dec 15, 2008, 07:01 PM

anyone else see this?

Fitseries3 · Dec 15, 2008, 07:02 PM

not me. sometimes the home pages stops loading after the tpu logo pops up though if that means anything.

WhiteLotus · Dec 15, 2008, 07:03 PM

nope not to me.

a111087 · Dec 15, 2008, 07:25 PM

Quote:

Originally Posted by fitseries3

you must have some sorta virus/worm/spyware/etc.

I have nod32 running in background all the time
I'll try some free anti-adware/spyware to see what is going on

EDIT:
Ok, I found one trojan, but it just displays web content on your desktop saying that your computer is infected...

Polaris573 · Dec 15, 2008, 08:18 PM

I'm using Firefox and NoScript and that never happens to me.

spearman914 · Dec 15, 2008, 08:20 PM

Have u did some tweaks in about:config in firefox. Try resetting all the changes u made.

go to the address bar and type about:config. It's for advanced tweaking.

a111087 · Dec 15, 2008, 08:24 PM

didn't do any tweaks there
and this windows is about 2 weeks old

thoughtdisorder · Dec 18, 2008, 09:01 PM

Quote:

Originally Posted by a111087

No script filters cross-site scripting on techpowerup.com
Then page is transferred to
http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1

Any explanation?

Hate to say it, but if you Google just part of that thread there is some discussion of an "exploit" out there that redirects you to the very document you have listed. I would run a few different Anti virus programs as well as CCleaner to rule out any exploits. (Newsvine)

http://www.google.com/search?hl=en&q...43&btnG=Search

a111087 · Dec 18, 2008, 10:22 PM

lol, that sucks!
it doesn't redirect me to pdf file anymore, but i still see the cross-site script sign
oh well, I didn't do an upgrade to run less anti-virus programs

)

a111087 · Dec 21, 2008, 05:57 PM

ok, its gone now for sure.

Dec 15, 2008, 12:53 AM	#1
a111087 Join Date: Apr 2007 Location: US Posts: 2,509 (1.12/day) Thanks: 240 Thanked 189 Times in 156 Posts System Specs	cross-site scripting No script filters cross-site scripting on techpowerup.com Then page is transferred to http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1 Any explanation? __________________

Processor:	Intel Q9400
Motherboard:	asus p5q-pro
Cooling:	Ultra120
Memory:	6GB ddr2
Video Card:	NVS 290
Hard Disk:	3TB + 1.5TB
Optical Drive:	ASUS DVD burner
CRT/LCD Model:	Samsung F2380
Case:	Silverstone Fortress FT02B
Sound Card:	Creative X-Fi
PSU:	750W PC P&C
Software:	win 7 ultimate 64bit

Processor:	Intel Core i7-2600K @ 3.4 GHz
Motherboard:	ASUS P8Z68-V Pro
Memory:	3x 2048 MB Mushkin DDR3
Video Card:	ASUS GeForce GTX 670 Direct CU II TOP
Hard Disk:	Crucial C300 128 GB, WD6400AAKS 640 GB, WD15EADS 1.5 TB
Optical Drive:	BenQ DW1640
CRT/LCD Model:	Dell U3011 30", 2560x1600 + 19" 1280x1024
Case:	NZXT H2
Sound Card:	On-board Realtek HD
PSU:	Kingwin Absolute Platinum 550 W
Software:	Windows 7 64-bit

Dec 15, 2008, 03:56 PM	#3
a111087 Join Date: Apr 2007 Location: US Posts: 2,509 (1.12/day) Thanks: 240 Thanked 189 Times in 156 Posts System Specs	that's what I said, but it did it to me a few times already __________________

Processor:	Intel Q9400
Motherboard:	asus p5q-pro
Cooling:	Ultra120
Memory:	6GB ddr2
Video Card:	NVS 290
Hard Disk:	3TB + 1.5TB
Optical Drive:	ASUS DVD burner
CRT/LCD Model:	Samsung F2380
Case:	Silverstone Fortress FT02B
Sound Card:	Creative X-Fi
PSU:	750W PC P&C
Software:	win 7 ultimate 64bit

Dec 15, 2008, 07:43 AM	#2
W1zzard Benevolent Dictator Join Date: May 2004 Location: Stuttgart, Germany Posts: 13,761 (4.18/day) Thanks: 184 Thanked 10,208 Times in 3,157 Posts System Specs	uh?

Dec 15, 2008, 06:22 PM	#4
W1zzard Benevolent Dictator Join Date: May 2004 Location: Stuttgart, Germany Posts: 13,761 (4.18/day) Thanks: 184 Thanked 10,208 Times in 3,157 Posts System Specs	can you explain what you are doing and what happens?

Dec 15, 2008, 06:44 PM	#5
a111087 Join Date: Apr 2007 Location: US Posts: 2,509 (1.12/day) Thanks: 240 Thanked 189 Times in 156 Posts System Specs	When I go to techpowerup.com (using Firefox 3.0.4) I sometimes (about 30% of the time) get this: this is what no script console shows: Right after that I got the message from Adobe reader saying it can't open pdf file in firefox because ... well, I just can't get it to work with latest firefox. Then page is transfered to the link below: http://76.74.239.143/zzaweoiweoiw/pdf.php?id=6105&vis=1 That is all. I don't know what that is. I'm probably making too big of a deal out of it. Oh, and no-script is set to allow all script and it still does it. __________________

Dec 15, 2008, 06:51 PM	#6
Fitseries3 Eleet Hardware Junkie Join Date: Oct 2007 Location: Republic of Texas Posts: 14,993 (7.30/day) Thanks: 4,318 Thanked 3,285 Times in 2,186 Posts System Specs	you must have some sorta virus/worm/spyware/etc.

System Name:	Craigslist-nickle-and-dime
Processor:	i5 655k
Motherboard:	Gigabyte H55M-UD2H
Cooling:	poop
Memory:	3x2gb OCZ Platinum 1600mhz
Video Card:	Asus 6950 2gb DCII
Hard Disk:	WD 640GB,1TB Black
Optical Drive:	Samsung 22x DL DVD-RW
CRT/LCD Model:	Sammy 55in LED TV
Software:	WIN 7 x64

Dec 15, 2008, 07:01 PM	#7
W1zzard Benevolent Dictator Join Date: May 2004 Location: Stuttgart, Germany Posts: 13,761 (4.18/day) Thanks: 184 Thanked 10,208 Times in 3,157 Posts System Specs	anyone else see this?

Dec 15, 2008, 07:02 PM	#8
Fitseries3 Eleet Hardware Junkie Join Date: Oct 2007 Location: Republic of Texas Posts: 14,993 (7.30/day) Thanks: 4,318 Thanked 3,285 Times in 2,186 Posts System Specs	not me. sometimes the home pages stops loading after the tpu logo pops up though if that means anything.

Dec 15, 2008, 07:03 PM	#9
WhiteLotus Join Date: Jul 2007 Location: Plymouth, UK Posts: 4,801 (2.26/day) Thanks: 529 Thanked 856 Times in 682 Posts System Specs	nope not to me. __________________ “Sorry but I cannot respond now, I am running a full virus scan on the internet.” -brandonwh64

System Name:	Vintage
Processor:	i3 530 at Stock
Motherboard:	Gigabyte GA-H55M-UD2H
Cooling:	Scythe Zipang II
Memory:	2x4GB Crucial DDR3
Video Card:	6850 something
Hard Disk:	WD 6401AALS 640GB// WD 10EACS 1TB// M4 124GB SSD
Optical Drive:	some LG thing
CRT/LCD Model:	Samsung SM223BW 21.6"
Case:	Generic
PSU:	Corsair HX 520W
Software:	Windows 7

Dec 15, 2008, 08:18 PM	#11
Polaris573 Senior Moderator Join Date: Feb 2005 Location: Little Rock, USA Posts: 3,284 (1.09/day) Thanks: 68 Thanked 765 Times in 451 Posts System Specs	I'm using Firefox and NoScript and that never happens to me. __________________ Lector benevole, legum servi sumus ut liberi esse possimus. Accipere quam facere praestat injuriam Fold for Techpowerup!

Processor:	LGA 775 Intel E6550 Core2 Duo "Conroe" 2.33Ghz 4MB L2 Cache
Motherboard:	Abit IX38 QuadGT -- Intel X38 Chipset
Cooling:	Arctic Freezer
Memory:	6GB G.Skill DDRII 800 4-4-3-5
Video Card:	Sapphire HD 4850 512 MB PCI-E
Hard Disk:	1 TB Seagate 32MB Cache, 250 GB Seagate 16MB Cache
Optical Drive:	Asus DVD Burner
CRT/LCD Model:	Acer X203w
Case:	Coolermaster Centurion 5
Sound Card:	Creative Sound Blaster X-Fi Xtreme Music
PSU:	OCZ StealthXStream 600 Watt
Software:	Windows 7 Ultimate x64

Dec 15, 2008, 08:20 PM	#12
spearman914 Join Date: Apr 2008 Location: Brooklyn, New York 11223 Posts: 3,000 (1.61/day) Thanks: 339 Thanked 510 Times in 482 Posts System Specs	Have u did some tweaks in about:config in firefox. Try resetting all the changes u made. go to the address bar and type about:config. It's for advanced tweaking. __________________ .................................................. .. “Originally Posted by mlee49 So pain level on a 1 to 10 scale, 10 being having a wart removed on your butthole with pliers.”

System Name:	Mine \| Dad + Mom
Processor:	E8500 E0 Wolfdale @ 4.6GHz 1.5V \| E2180 M0 Allendale @ 3.0GHz 1.3V
Motherboard:	Asus Maximus Formula (X48) w/ Rampage BIOS \| Asus P5Q Pro (P45)
Cooling:	Xigmatek Rifle HDT-S1283 w/ SFF21F Fan \| Arctic Cooling Freezer 7 Pro
Memory:	G.Skill Pi Black 2x2GB 1.02GHz CL5 \| OCZ Reaper 2x2GB 1.05GHz CL5
Video Card:	Sapphire 4870X2 2GB 820/1020MHz \| Sapphire 4850 1GB 700/1100MHz
Hard Disk:	WD VR 150GB 10K RPM + WD 500GB 7.2K RPM \| WD 200GB 7.2K RPM
Optical Drive:	Samsung Black DVD Burner \| Lite-On Black DVD Burner w/ Lightscribe
CRT/LCD Model:	Acer P243WAID 24" 1920x1200 LCD \| Acer V193W 19" 1440x900 LCD
Case:	Cooler Master HAF 932 Full-Tower \| Antec Twelve Hundred Mid-Tower
Sound Card:	Fatal1ty Xtreme Gamer w/ Z-5500 5.1 \| On-Board Audio w/ S-220 2.1
PSU:	PC Power and Cooling 750W Non-Modular \| Corsair HX-520W Modular
Software:	Windows Vista Home Premium X64 \| Windows Vista Home Premium X64
Benchmarks:	Not Wasting Time!

Dec 15, 2008, 08:24 PM	#13
a111087 Join Date: Apr 2007 Location: US Posts: 2,509 (1.12/day) Thanks: 240 Thanked 189 Times in 156 Posts System Specs	didn't do any tweaks there and this windows is about 2 weeks old __________________

Dec 18, 2008, 10:22 PM	#15
a111087 Join Date: Apr 2007 Location: US Posts: 2,509 (1.12/day) Thanks: 240 Thanked 189 Times in 156 Posts System Specs	lol, that sucks! it doesn't redirect me to pdf file anymore, but i still see the cross-site script sign oh well, I didn't do an upgrade to run less anti-virus programs ) __________________

Dec 21, 2008, 05:57 PM	#16
a111087 Join Date: Apr 2007 Location: US Posts: 2,509 (1.12/day) Thanks: 240 Thanked 189 Times in 156 Posts System Specs	ok, its gone now for sure. __________________

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Hacked Antivirus Site Delivers a Virus	Polaris573	News	14	Feb 10, 2008 08:38 PM
Awesome Site !! Kool Forums ! My Contribution to the Site!	LoLo	Comments & Feedback	7	Oct 26, 2004 06:50 PM