RE: Cross site scripting explained

Take a look at one of several good papers on the subject. This one was written by NGSSoftware, a company that has authored several auditing tools and research papers on the subject.

http://www.nextgenss.com/papers/advanced_sql_injection.pdf

Loki
Fate Research Labs
Internet Warfare and Intelligence
http://www.fatelabs.com         

-----Original Message-----
From: michael judge [mailto:mjudge3414@comcast.net] Sent: Sunday, December 15, 2002 4:12 AM
To: vuln-dev@securityfocus.com
Subject: Cross site scripting explained

Can anyone explain to me or point me to a paper that explains exactly what cross site scripting is, and how it could be useful/cause problems for someone? Thanks.

Mike Received on Mon Dec 16 18:43:30 2002