yakli
Posts: 3
|
| Posted: 04/29/2009, 5:27 PM |
|
I don't know is this a bug or not.
But I have to say that, websites developed with CCS have to be tested for this kind of vulnerabilities. Especially, if you are giving an online services for your customers your website have to be secured by you.
For example; your customers can have an e-mail which contains a link like that and all of your cookie and session infos could be seen by an unwanted and unauthorized persons who can run off-site javascipts.
http://forums.yessoftware.com/index.php?"><script>alert('ss')</script>
_________________
İlkay Ayas
Metunet Computer Ltd. Co.
MCSE,CCNA,Webmaster
www.metunet.com.tr
ilkay@metunet.com.tr |
 |
 |
|
