Hacking & Cracking

XSS (Cross-site scripting)

Cross-site scripting is a vulnerability that exists in many web applications. It is rated as a top threat for web application developers and also rated as one of the famous types of exploits among web application hackers. Before moving ahead, I’d like to point out few examples that prove how common cross-site scripting is, even in nowadays, after 11 years from February 2, 2000 when the first advisory about Cross-Site Scripting (XSS) was published, namely “Advisory CA-2000-02 Malicious HTML Tags Embedded in Client Web Requests”.

Drupal is a famous open source content management system. Shown below is a screenshot of Drupal, Security Mailing list (2011 February).

More >

Share