Hot answers tagged

2 votes

Reflected XSS found in web application via POST request with JSON body. Is this issue exploitable?

It depends on how strongly the content-type requirement is enforced. There are three possibilities here: Most of the time, the server only cares that the content can be parsed as JSON and ignores the ...
user avatar
  • 39.5k
1 vote

Parameter vulnerable for HTML injection but cannot exploit because of URL encoding

Do you see this behavior in all browsers? If not, you could abuse it in those specific browsers. Another method you could try is for instance including the vulnerable page using an <iframe>. ...
user avatar
  • 270
1 vote

Is PHP json_encode sufficient for HTML data blocks?

Even though a data block won't be processed by the browser, the question is whether or not the JSON string is able to escape the data block in the context of HTML. If we're talking about language-...
user avatar
  • 415
1 vote

How can I steal all cookies from reflected XSS?

If document.cookie is empty, it is likely these cookies are set with the HttpOnly flag. This means you cannot access the cookies through JavaScript. You shall have to reside to other methods in which ...
user avatar
  • 270

Only top scored, non community-wiki answers of a minimum length are eligible