- 'Cross-site scripting' tears holes in Net security
USA Today article by Byron Acohido that details WhiteHat Security's assesment of Hotmail, Yahoo, Amazon, and America Online.
http://www.usatoday.com/tech/news/2001-08-31-hotmail-security-side.htm
(Added: Wed Apr 05 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- Apache: Cross Site Scripting Info
How the attack affects websites hosted on the Apache webserver and Apache specific issues.
http://httpd.apache.org/info/css-security/
(Added: Wed Apr 05 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- Bypassing Javascript Filters - The Flash Attack
Paper by EyeonSecurity explaining how to inject CSS attacks into Web applications which allow Flash content.
http://eyeonsecurity.org/papers/flash-xss-description.htm
(Added: Wed Apr 05 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- CERT Advisory CA-2000-02: Malicious HTML Tags Embedded in Client Web Requests
Advisory published jointly by the CERT Coordination Center, DoD-CERT, the DoD Joint Task Force for Computer Network Defense (JTF-CND), the Federal Computer Incident Response Capability (FedCIRC), and the National Infrastructure Protection Center (NIPC).
http://www.cert.org/advisories/CA-2000-02.html
(Added: Thu Apr 06 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- CERT/CC: How To Remove Meta-characters From User-Supplied Data In CGI Scripts
Examples in C and Perl.
http://www.cert.org/tech_tips/cgi_metacharacters.html
(Added: Thu Apr 06 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- CNN.com: Schwab's Site Could be Vulnerable
Charles Schwab's online customers are at risk of having their account information accessed and their accounts manipulated due to the same software vulnerability that affected E-Trade's Web site in September.
http://www.cnn.com/2000/TECH/computing/12/08/schwab.cost.idg/
(Added: Mon Apr 03 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- Cross Site Scripting Vulnerabilities
Security consultant David deVitry offers background information, a free CSS vulnerability detector, and a list of vulnerable sites.
http://www.devitry.com/security.html
(Added: Mon Apr 03 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- iDefense iALERT White Paper: Evolution of Cross-Site Scripting Attacks
Predicts semi-automated techniques will aggressively begin to emerge for targeting and hijacking web applications.
http://www.idefense.com/XSS.html
(Added: Mon Apr 03 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- Information on Cross-Site Scripting Security Vulnerability
Microsoft Technet provides a FAQ, overview of the threats posed by XSS, and suggestions for how their customers can protect themselves.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/topics/crssite.asp
(Added: Mon Apr 03 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- InfoWorld Opinions: Cross-site Scripting
Article on this often overlooked threat with links.
http://www.infoworld.com/article/02/05/03/020506opsecurity_1.html
(Added: Wed Apr 05 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- Microsoft Security Bulletin (MS00-060)
Patch available for 'IIS Cross-Site Scripting' vulnerabilities.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms00-060.asp
(Added: Thu Apr 06 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- perl.com: Preventing Cross-site Scripting Attacks
Paul Lindner, author of the mod_perl cookbook, explains how to secure our sites against Cross-Site Scripting attacks using mod_perl and Apache::TaintRequest.
http://www.perl.com/pub/a/2002/02/20/css.html
(Added: Wed Apr 05 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
- The Cross Site Scripting FAQ
Answers questions on identification, threats, and prevention. Provides examples and links.
http://www.cgisecurity.com/articles/xss-faq.shtml
(Added: Thu Apr 06 2006 Rating: 0.00 Votes: 0)
Rate It
Review It
