Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Eksploatisan je Cross Site Scripting (XSS) propust na hidmet.gov.rs. Na osnovu primera rekao bih da je samo reflektujući, ali i dalje postoje načini za zloupotrebu. Izvor:
https://twitter.com/Anonymous_Link/statu...7209760768, arhivirano:
https://archive.ph/WPNwb.
![[Image: attachment.php?aid=392]](https://bezbedanbalkan.net/attachment.php?aid=392)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Preporuka za građane, ne otvarajte linkove koji Vam stižu od nepoznatih izvora, a vode na
http://hidmet.gov.rs. Jedna od Anonimus grupa je pronašla propust koji može da izmeni stranicu sa ciljem umetanja malicioznog koda. Za nadležne, naravno, ispravite ovaj propust, čini mi se i da samo funkcija htmlspecialchars(urldecode()) bi rešila problem (ali ima i drugih kompletnijih rešenja za PHP).
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
IP: 79.101.42.78
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
