Other nomination

Stored XSS Vulnerability @ Amazon

Dirk Wetter

Amazon's search-inside-this-book feature passed matched book text unfiltered into a tooltipText variable, so script printed in a published book executed when a shopper moused over a search result. Web security books already contain such payloads, making the printed page itself the injection channel into amazon.de, .co.uk and .com.

Record

Researcher

Dirk Wetter

In the archive

• Nominated for the 2010 Top 10 Web Hacking Techniques

Tags

• xss
• case-study
• dom
• encoding
• charset
• filter-bypass
• owasp-a02-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Dirk Wetter, first published at the original source. Preserved copies are kept so the citation survives its host.