| Publisher | Infosecwriters.com | ||
|---|---|---|---|
| Format | HTML | Date added | 22 Feb 2005 |
| Topics | Security Management, Anti-Hacking | ||
| Downloads | 38 | ||
Cross site scripting (XSS) flaws are a relatively common issue in web application security, but they are still extremely lethal. They are unique in that, rather than attacking a server directly, they use a vulnerable server as a vector to attack a client. This can lead to extreme difficulty in tracing attackers, especially when requests are not fully logged (such as POST requests). Many documents discuss the actual insertion of HTML into a vulnerable script, but stop short of explaining the full ramifications of what can be done with a successful XSS attack. While this is adequate for prevention, the exact impact of cross site scripting attacks has not been fully appreciated. This paper explores those possibilities.
Did you find this white paper useful?
25 out of 50 users found this white paper useful
Related white papers
Activate Today!Realize ROI with Intel® vPro Technology and Microsoft System Configuration Manager
Join the team from the Intel vPro Expert Center for an informative Webcast on the ROI savings and activation process for PCs with Intel® vPro™ technology and Microsoft System Configuration...
Animated Demo of vPro Systems
This animated demo shows how vPro offers security and manageability on the chip.
Tube Lines reaps rewards of upgrading to Intel®Core™2 processor with vPro™technology
Tube Lines has a 30-year Public Private Partnership (PPP) contract with London Underground. It is responsible for the maintenance and upgrade of the infrastructure on the Jubilee, Northern and Piccadilly...
Video Case Study: Verizon UK
This video case study looks at how Chris Maylor, head of architecture services at Verizon UK, went about implementing vPro.
Webinar: Activate Today! Realize ROI with Intel® vPro Technology and Symantec Altiris
Join the team from the Intel vPro Expert Center for an informative Webcast on the ROI savings and activation process for PCs with Intel® vPro™ technology and Symantec Altiris. This...
vPro Expert Center Wiki, all you need to know about vPro and activation of vPro systems
Learn about vPro basics from this wiki. It contains info on what vPro is, as well as links to activation documentation.
vPro ROI Calculator
A free to use Intel PC Total Cost of Ownership Estimator
