Wednesday 22 September 2010

Twitter - New XSS Exploit

A new exploit was discovered in Twitter today allowing for HTML code to be injected into tweets. This allowed the attacker/user to redirect users when the tweet was just hovered over. This seems to have been patched now, however it is a wake-up call for users to always be alert when using any social networking website. You can find out more information and see a demo of this exploit in action in the Sophos YouTube video.


2 comments: