Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Whitepaper "SESSION RIDING - A Widespread Vulnerability in Today's Web Applications" Dec 17 2004 08:36AM
Philippe P. (webappsec philippe prados name)
Hello,

I like this paper ( http://www.securenet.de/papers/Session_Riding.pdf ), but
i would like to make some comments:

- In chapter 6.3.1, you say a javascript can help to submit the URL 1) and
the URL 2).

I think it's not necessary to use javascript for that. It's possible to
return a spec...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus