3 ms·
Hi, just wanted to let you know your application is vulnerable to XSS. I can impersonate users, steal login credientials, and more. http://en.wikipedia.org/wik
by inconditus 15y ago
Hi, just wanted to let you know your application is vulnerable to XSS. I can impersonate users, steal login credientials, and more.
http://en.wikipedia.org/wiki/Cross-site_scripting http://en.wikipedia.org/wiki/Cross-site_scripting for more inofrmation.
- chetan51 15y agoAw man, I should have checked for that. Thanks so much for bringing this to my attention. I'll work on it ASAP.
- chetan51 15y agoBut since anything you input to the system will only be displayed back to you, how are you able to perform XSS attacks to steal other users' data? Did you mean database code injection?