[WEB SECURITY] Cross-Site Scripting attacks via redirectors

MustLive mustlive at websecurity.com.ua
Tue Aug 4 16:31:07 EDT 2009

Hello participants of Mailing List.

At the end of July I published my article Cross-Site Scripting attacks via 
redirectors (http://websecurity.com.ua/3376/). And today I published English 
version of my article (http://websecurity.com.ua/3386/).

In this article I wrote about using of redirectors in different browsers for 
conducting of Cross-Site Scripting attacks.

In the article I wrote about XSS attacks in location-header and 
refresh-header redirectors in different browsers: Mozilla 1.7.x, Mozilla 
Firefox, Internet Explorer (IE6), Opera and Google Chrome. I'm also waiting 
for information from one man, who are checking all mentioned in article 
vulnerabilities in other browsers, so when there will be new information 
(about other affected browsers), I'll add it to my article.

You can read the article Cross-Site Scripting attacks via redirectors at my 
site: http://websecurity.com.ua/3386/

Best wishes & regards,
Administrator of Websecurity web site


Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn

More information about the websecurity mailing list