» SRAN DATA Safehouse
Thailand's Cross-site scripting (XSS) Vulnerable sites
A page to gather vulnerable Thai website information from XSSed.com, Zone-H.org and various sources.
42 sites found (last update 2010-02-08 22:01:19)
| * ac.th = academic institutions, co.th = commercial entities and business entities, go.th = government, in.th = any kind of organization or individual, mi.th = military, net.th = telecommunication business, or.th = non-profit organization | |
Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users. Examples of such code include HTML code and client-side scripts. An exploited cross-site scripting vulnerability can be used by attackers to bypass access controls such as the same origin policy. Vulnerabilities of this kind have been exploited to craft powerful phishing attacks and browser exploits. As of 2007, cross-site scripting carried out on websites were roughly 80% of all documented security vulnerabilities. Often during an attack "everything looks fine" to the end-user who may be subject to unauthorized access, theft of sensitive data, and financial loss.
Referencehttp://en.wikipedia.org/wiki/Cross-site_scripting