Castellano

Introduction HDIV

Cross-Site Scripting (XSS)

This attack technique is based in the injection of code (javascript or html) in the pages visualized by the application user.

Example: We have a web page where we can type a text, as is shown in the image below:

Submit field example
Image 1 2 - XSS Vulnerability Sample

The html code of the page is:

The html code

Typing the following text in the textbox:

Typing the following text in the textbox

Next » « Return to Presentation HDIV