3 ms·
XSS Proof of concept. I've injected javascript into this page: http://debate-zone.com/zones/15 http://debate-zone.com/zones/15 Escape your inputs properly or
by mike-cardwell 17y ago
XSS Proof of concept. I've injected javascript into this page:
http://debate-zone.com/zones/15 http://debate-zone.com/zones/15
Escape your inputs properly or suffer cookie stealing and session hijacking XSS attacks.
- mike-cardwell 17y agoI could have put something on that page to steal your cookie contents. Would I have been able to do anything interesting with this interesting looking page as an admin user? http://debate-zone.com/admin http://debate-zone.com/admin
- giantfuzzypanda 17y agoThanks for testing this stuff out! That admin page is actually broken, I don't actually have a working admin page. As for the XSS stuff, I'm going to go fix that.