Monday, March 16, 2009

Evading Web XSS Filters through Word (Microsoft Office and Open Office) in Enterprise Web Applications

Abstract: This paper sheds light on the hyper linking issues observed during penetration testing of web based enterprise applications. This concept can be used to bypass standard XSS filters by creating a malicious Microsoft word document.

Author: Aditya K Sood


- EF

No comments: