News for hackers. Stuff that matters.

A comment on I hacked Uber's website yesterday.

Re:I hacked Uber's website yesterday by nsx147 on Sunday June 14, 2015 @02:49PM (#9715913)
Some Uber intern probably made that form and didn't know what sanitizing inputs was about. Good find - but easy fix. You usually can't get away with XSS attacks anymore
[ Parent | on HN ]
Re:I hacked Uber's website yesterday by uberhacked on Sunday June 14, 2015 @02:56PM (#9715949)
Uber told me they used WordPress to build their petition sites. Maybe other WordPress sites are vulnerable?
[ Parent | on HN ]
Re:I hacked Uber's website yesterday by noeltock on Sunday June 14, 2015 @03:50PM (#9716095)
WordPress has plenty of functions to sanitize, the one who made the theme or dropped in the form probably overlooked it.
[ Parent | on HN ]