Pages

Thursday, December 8, 2011

XSS Vulnerability in Google Code site

Just go to http://code.google.com/apis/ajax/playground/ and then click on edit HTML after that remove all the codes and type this script : <img src="<img src=search"/onerror=alert("XSS")//"> and click on DEBUG CODE, and then first it will show you "Sample must have <head> element" click OK and wait for the window to load if nothing happen then try the same thing again or simply you can click on RUN CODE, and you will get a popup which as shown in below image its nothing but a XSS Vulnerability.

0 comments:

Post a Comment

Related Posts Plugin for WordPress, Blogger...