[Eclipse]

I have a question.

Say there's a site, example.com. At example.com/shit/lel.php, there's a persistent XSS vulnerability. Is there a way that you could insert some code so that example.com/index.php is edited?

I figure it's a stretch, but I'm just making sure.

Eclipse

[dotcppfile]

obviously, that's what XSS is about, injecting HTML, CSS or Java Script, and it's dangerous because you can inject Java Script, so try to do something about that.

[Eclipse]

obviously, that's what XSS is about, injecting HTML, CSS or Java Script, and it's dangerous because you can inject Java Script, so try to do something about that.

I don't think you understood the question. I know what XSS allows you to do, but I'm asking if it's possible to edit a page that's not directly vulnerable.

example.com/shit/shit.php is vulnerable and editable. Can something be added here so that example.com/index.php is edited? (../../index.php)

[Dyme]

Nope. Not universally, at least.

[Eclipse]

Nope. Not universally, at least.

Alright, that's all I needed to know.

#closed