Paid Advertising
web application security lab

MySpace XSS worm revisited

This uses another one of the vectors on my page to propagate. If you allow objects that can embed flash, it can embed live script and JavaScript.

Leave a Reply Or Discuss On the Forums