HTML, javascript alert security issue
October 18, 2018 12:00 AM
I am experiencing this error when I load my HTML version of my courses to the server, can anyone provide some guidance?
undefined font-size: 7.5pt;">GET /nhsntraining/courses/2018/2018%20HTML/C27OPCSDOM/index.html? undefined font-size: 7.5pt;">jmptopg=javascript%3Aalert%2822%undefined font-size: 7.5pt;"undefined font-size: 7.5pt;"undefined font-size: 7.5pt;">javascript:alert(22) undefined font-size: 7.5pt;"undefined font-size: 7.5pt;">ifr_javascript:alert(22)" undefined font-size: 7.5pt;"undefined font-size: 7.5pt;">src="javascript:alert(22)" style="width: 100%; height: 100%; border: 0px; overflow: hidden;undefined font-size: 7.5pt;"undefined left: 0px; top: 0px;"undefined font-size: 7.5pt;"undefined font-size: 7.5pt;"undefined font-size: 7.5pt;"undefined font-size: 7.5pt;"undefined
Discussion (1)
let me try this again.
undefined
jmptopg=javascript%3Aalert%2822%
undefinediframe id="ifr_ javascript:alert(22) " name="ifr_javascript:alert(22)" scrolling="no"
src="javascript:alert(22)" style="width: 100%; height: 100%; border: 0px; overflow: hidden;
visibility: hidden; left: 0px; top: 0px;"undefined
Parameter: jmptopg
Risk(s): It may be possible to steal or manipulate customer session and cookies, which might be used to impersonate a legitimate
user, allowing the hacker to view or alter user records, and to
Discussions have been disabled for this post