Netscape Hacked!
Thursday, July 27, 2006
Netscape.com has been hacked via a persistent Cross Site Scripting (XSS) vulnerability in their newly launched Digg-like news service. Attackers (who are obviously fans of Digg) have used the XSS vulnerability to inject their own javascript code snippets into pages on the website, including the homepage. As of now, it has only been used to display javascript alerts with "comical" messages and to redirect visitors to Digg.com!
Here is the screenshot taken up by the f-secure people:

Well, I think Digg is lucky to have fans like these, I am not sure why they don't like Netscape when it is always good to have competition around.
Tags:








