Comments on: Pentagon Web Site Vulnerabilities Identified

By: ip intel

ip intel — Tue, 24 Jan 2012 18:29:41 +0000

http://ipduh.com/url/decode/?http://pentagon.afis.osd.mil/tours?action=viewLargePhoto&title=1%3E%22%3E%3CScRiPt%20%3Ealert%28document.cookie%29%3B%3C/ScRiPt%3E

By: XSS Flaw on Paypal.com | Portable Digital Video Recorder

XSS Flaw on Paypal.com | Portable Digital Video Recorder — Sat, 27 Mar 2010 07:36:02 +0000

[...] Pentagon Web Site Vulnerabilities Identified [...]

By: Week 50 in Review – 2009 | Infosec Events

Week 50 in Review – 2009 | Infosec Events — Sat, 02 Jan 2010 07:24:59 +0000

[...] Pentagon Web Site Vulnerabilities Identified – praetorianprefect.com A Romanian hacker has discovered security vulnerabilities on a tour images section of the official web site of the Pentagon. [...]

By: MaXe

MaXe — Wed, 09 Dec 2009 15:58:34 +0000

There’s more XSS vulnerabilities on the DoD domain.. (They’re already been notified)

By: Website design and developer – Hacker proof XSS attacks on Pentagon’s public Website

Wed, 09 Dec 2009 02:24:33 +0000

[...] to an external JavaScript, I can do most anything I can do in JavaScript,” says Kennedy, who blogged about the find yesterday. “That includes basic stuff, like crafting a URL to send to users [...]

By: Praetorian Prefect | Six Bulletins in Last Patch Tuesday of 2009

Praetorian Prefect | Six Bulletins in Last Patch Tuesday of 2009 — Tue, 08 Dec 2009 20:36:41 +0000

[...] addressed immediately; even if you are confident about not browsing malicious sites, a known site, such as the Pentagon web site, could be used to automatically execute or redirect you to malicious code using cross-site [...]

By: Prefect

Prefect — Tue, 08 Dec 2009 17:24:53 +0000

MDA - I could see that. I didn't want to say cracker, because there did not appear to be any malicious intent.

Researcher did not appear appropriate either.

So I settled on hacker - he who may enjoy the challenge of breaking into other computers but does no harm;

By: mda

mda — Tue, 08 Dec 2009 13:08:07 +0000

“A Romanian hacker” Cand am vazut asta mi-a pierit cheful de citit.Sa fim seriosi. Pa

By: Pentagon XSS-ed. - Romanian Security Team - SECURITY RESEARCH

Pentagon XSS-ed. - Romanian Security Team - SECURITY RESEARCH — Tue, 08 Dec 2009 10:43:59 +0000

[...] XSS-ed. Praetorian Prefect | Pentagon Web Site Vulnerabilities Identified __________________ "Social engineering bypasses all technologies, including [...]