1. Cross site scripting (XSS)
The problem: The “most prevalent and pernicious” Web application security vulnerability, XSS flaws happen when an application sends user data to a Web browser without first validating or encoding the content. This lets hackers execute malicious scripts in a browser, letting them hijack user sessions, deface Web sites, insert hostile content and conduct phishing and malware attacks.
Read more…
Categories: Database Security, Linux / Unix, Server Security, Tips, Tutorials, Website Security Tags: database, DOS, hack, hacked, hacking, javascript, MSSQL, mysql, network, networking, password, permission, security, sql injection
JavaScript Injection Overview
JavaScript is a widely used technology within websites and web based applications. JavaScript can be used for all sorts of useful things and functions. But along with this comes some additional security issues that need to be thought of and tested for. JavaScript can be used not only for good purposes, but also for malicious purposes.
Read more…
Categories: Server Security, Website Security Tags: browser, cross site scripting, firefox, hacked, hacking, injection, java, javascript, javascript injection, js, web, web security, xss