<div>Well, i am not a security related person but as you notified there is no rfi but Xss. I posted that information from <A href="http://www.secfreaks.gr">www.secfreaks.gr</A> where there they seem to believe its a rfi. Anyway i havent find the mail of the webmaster so no i havent contact them.</div> <div>I guess they wont care a lot, now that the elections have been finished.<BR><BR><B><I>ascii <ascii@katamail.com></I></B> wrote:</div> <BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">George Papandreou wrote:<BR>> There is no wonder why in hell Kostas Karamanlis is still our prime<BR>minister!<BR>> http://www.ekloges.ypes.gr/pages/index.html?http://www.secunia.com<BR>> http://www.ekloges.ypes.gr/pages/index.html?../lib/../lib/jslib.js<BR>> http://www.ekloges.ypes.gr/pages/index.html?../lib/default.css<BR><BR>client side stuff, no rfi here.<BR><BR> <SCRIPT type=text/javascript><br><br> function
fillFrame()<br> {<br> var a=location.search;<br> a=(a ? a.slice(1) : 'epikratia_map.html');<br> document.getElementById('data_frame').src=a;<br> }<br><br> </SCRIPT> <BR><BR>this can be used to execute JS using the javascript: handler so it's a<BR>security issue<BR><BR>http://www.ekloges.ypes.gr/pages/index.html?javascript:alert(%22helo%22);<BR><BR>have you notified the webmaster?<BR><BR>bye,<BR>Francesco `ascii` Ongaro<BR>http://www.ush.it/<BR></BLOCKQUOTE><BR><p> 
<hr size=1>Luggage? GPS? Comic books? <br>
Check out fitting <a href="http://us.rd.yahoo.com/evt=48249/*http://search.yahoo.com/search?fr=oni_on_mail&p=graduation+gifts&cs=bz"> gifts for grads</a> at Yahoo! Search.