2
votes
Reflected XSS found in web application via POST request with JSON body. Is this issue exploitable?
It depends on how strongly the content-type requirement is enforced. There are three possibilities here:
Most of the time, the server only cares that the content can be parsed as JSON and ignores the ...
- 39.5k
1
vote
Parameter vulnerable for HTML injection but cannot exploit because of URL encoding
Do you see this behavior in all browsers? If not, you could abuse it in those specific browsers.
Another method you could try is for instance including the vulnerable page using an <iframe>. ...
- 270
1
vote
Is PHP json_encode sufficient for HTML data blocks?
Even though a data block won't be processed by the browser, the question is whether or not the JSON string is able to escape the data block in the context of HTML. If we're talking about language-...
- 415
1
vote
How can I steal all cookies from reflected XSS?
If document.cookie is empty, it is likely these cookies are set with the HttpOnly flag. This means you cannot access the cookies through JavaScript.
You shall have to reside to other methods in which ...
- 270
Only top scored, non community-wiki answers of a minimum length are eligible