Other nomination

F5 and Acunetix XSS disclosure

Kelly Jackson Higgins

Kelly Jackson Higgins reports that the sla.ckers forum has begun mass-posting live XSS holes with proof-of-concept code, naming Dell, HP, MySpace, Photobucket, F5 and Acunetix. Jeremiah Grossman, watching the thread, calls the volume of public working vulnerabilities unusual and says XSS has passed buffer overflows as the most-exploited software weakness.

Record

Researcher

Kelly Jackson Higgins

In the archive

• Nominated for the 2006 Top 10 Web Hacking Techniques

Tags

• xss
• case-study
• large-scale-scan
• detection
• mitigation
• owasp-a03-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Kelly Jackson Higgins, first published at the original source. Preserved copies are kept so the citation survives its host.