Yahoo Advertising Service vulnerable to XSS attacks

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: center;"><img alt="yahoo-xss" src="http://www.thenewsinformer.com/wp-content/uploads/2013/06/yahoo-xss-550x263.jpg" /></div><div style="text-align: center;"><br /></div><div style="text-align: center;">Yahoo! Advertising Service has is vulnerable to cross-site scripting security bugs, discovered by Soumyodeep Mondal. Vulnerability is yet unfixed and exploitable using a simple payload as shown in screenshot. There is a demo video also available to show Proof of concept. Back in January, Yahoo! said that it had fixed a cross-site scripting (XSS) vulnerability in its webmail service which was blamed for a spate of account hijackings. The compromised accounts were used to send spam. Also The Yahoo! blog was vulnerable to XSS attacks because it utilized an outdated version of WordPress. </div></div>

Yahoo Advertising Service vulnerable to XSS attacks

Yahoo! Advertising Service has is vulnerable to cross-site scripting security bugs, discovered by Soumyodeep Mondal. Vulnerability is yet un...

Read more »