Cross Site scripting on ebay selling auctions

Some news papers and televison stations in germany showed today how to fake the seller information which are shown on the article description page. The trick is to include a jscript in the article description which overwrites the outputed HTML.
This is usefull if you have just created a new seller account and want to show your customers a high level of trust which is made by the feeback system from ebay.
Published Monday, January 26, 2004 8:37 PM by preishuber

Comments

No Comments

Leave a Comment

(required) 
(required) 
(optional)
(required)