
XSS Exploited 9 Chapter 6 285
This vulnerability is particularly interesting because, first of all, it is persistent and second
of all, it allows us to reuse TinyURL service in ways different to what the service was origi-
nally designed. If this vulnerability was found on a Social Networking Web site ,we could as
easily turn it into a self-propagating cross-site scripting worm.
XSS Exploitation: Point-
Click-Own with EZPhotoSales
In this book we look at cross-site scripting from many different angles. We describe the his-
tory, ways it can be used, and illustrate how it can ...