RE: Cross site scripting explained

["Loki" <loki () fatelabs com>]

Take a look at one of several good papers on the subject. This one was
written by NGSSoftware, a company that has authored several auditing
tools and research papers on the subject.

http://www.nextgenss.com/papers/advanced_sql_injection.pdf


Loki
Fate Research Labs
Internet Warfare and Intelligence
http://www.fatelabs.com

        


-----Original Message-----
From: michael judge [mailto:mjudge3414 () comcast net] 
Sent: Sunday, December 15, 2002 4:12 AM
To: vuln-dev () securityfocus com
Subject: Cross site scripting explained




Can anyone explain to me or point me to a paper that explains exactly 
what cross site scripting is, and how it could be useful/cause 
problems for someone?  Thanks.

Mike