3 votes
Accepted

XSS: window.location.href and window.open

I think the XSS flag is coming from the fact that window.location.href could be overwritten and include a javascript-URI for instance. If you want to keep using window.location.href in the ...
user avatar
  • 148
2 votes

Is this SQLi or XSS? (or both/neither)

Assuming it works, this is both, in two separate places. It's SQL injection, quite straightforwardly. The attacker is breaking out of a SQL string, terminating the current query, and injecting their ...
user avatar
  • 38.8k

Only top scored, non community-wiki answers of a minimum length are eligible