PayPal.com XSS Vulnerability

Re:PayPal.com XSS Vulnerability by nemothekid on Sunday May 26, 2013 @01:54PM (#5771836)

I could set up a redirect to POST data to that search form and steal his cookies/replace the page with a login form/all the fun you get running arbitrary javascript.

[ Parent | on HN ]

Re:PayPal.com XSS Vulnerability by deckar01 on Sunday May 26, 2013 @02:03PM (#5771875)

If you can redirect someone to that page you could redirect them to any page... But they want to go to PayPal, you send them there, and you pass along some post data to hijack their session.

[ Parent | on HN ]