HTML Injection with Image TagPosted on Saturday, April 26th, 2008 under Internet Security |
Well, HMTL can also be dangerous some times, I will not probably talk about how to use this trick, like others I also HATE spam, but here is the code that you can embed in comments, posts or anywhere in your profile where HTML is enabled.
<img src=”http://anysite.com/noimage.jpg” onerror=”window.location.href=’http://www.diggfish.com’;”>
Now, this takes advantage of the function called OnError which means if the image is not found (which obviously isn’t there, the image link you inserted never existed), it will redirect user to diggfish.com
Article Popularity : 33%
Random Posts
(No Ratings Yet)
Loading ...
