Date:
29 August 2007
Incident Type: Security Breach
WASC Threat Classification:
Still defacement but this time with a twist. This was a genuine XSS rewriting attack, and was carried out by well known people as a stunt. No information is provided on how the XSS vector found its way to the victim computers.
References: