Security risk spotted on Qantas site

[Flashback]

Security risk spotted on Qantas site - Security - Technology - News - iTnews.com.au

Mysterious XSS vulnerability could be bad news.


Security researchers have noted a security vulnerability lurking on the online booking website for airline Qantas.


The cross-site scripting vulnerability was discovered by security watchlist XSSED.com - the second time the integrity of Qantas' web properties has been called into question by the publication.

 

[harvyk]

You look closely at enough websites (web applications) out there and you'll probably find a security weakness or two...

It's how QF then handle the weakness is the true test..

 

[rwatts]

You look closely at enough websites (web applications) out there and you'll probably find a security weakness or two...

It's how QF then handle the weakness is the true test..

Plus there are XSS vulnerabilities and there are XSS vulnerabilities. I know my organisation's internet web site has at least one XSS issue but it is non-persistant and would require a lot of social engineering to get someone to visit the site and shoot their self in the foot. I dont like it and have raised it, but when you outsource web design it can be difficult to get things like that fixed.

Richard.