Security Hero Rotating Header Image

XSS flaws poke ridicule at entertainment industry

XSS flaws poke ridicule at entertainment industry

Cheeky crackers used a cross-site scripting flaw on the web sites of the Motion Picture Association of America (MPAA) to inject listings from controversial torrent links site The Pirate Bay.

Vektor, a member of the Team Elite group of hackers, smuggled links culled from the The Pirate Bay into content served up when surfers visited the MPAA’s recommended list of sites. The MPAA’s legal action against The Pirate makes the supposed endorsement ironic and embarrassing, if not completely unexpected.

Cross-site scripting (XSS) security flaws on websites are all too commonplace and the MPAA is a high-profile target, especially after the four defendants in The Pirate Bay trial were found guilty in a recent high-profile trial. So it was only really a question of time until hackers managed to find a chink in its armour to exploit.

URL: http://www.hackinthebox.org/index.php?name=News&file=article&sid=31223

Leave a Reply

Your email address will not be published. Required fields are marked *