Home page logo

bugtraq logo Bugtraq mailing list archives

RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
From: "Sergey V. Gordeychik" <gordey () itsecurity ru>
Date: Fri, 30 Sep 2005 10:00:55 +0400

Hi list.

I checked some ideas and think that reflected XSS in user-agent and
other http request headers fileds (cookies for example) can be exploited
via http request smuggling\splitting cache poisoning attacks using
described techniques.
So vendors who discard such vulnerabilities as not explotable should
take it into account. 

Sergey V. Gordeychik,

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]