Hi there,
I'm not sure where I should post this but since XSS is a security problem, I thought I should put it here.
I currently have a website on a Windows IIS 6 server. Website's done with ASP 1.1. I did not use the ASP.net XSS library but instead used validation on all my form fields and set Request Validation to "true".
However, recently, some bots (i assume) managed to do some XSS on my default.aspx page and also index.htm page (which redirects to the default page). Some javascript code was stored after the <body> tag. The code redirects itself to some Russian virus website. This happened 2 times.
I changed my password and removed the virus javascript on my webpage.
After doing some research, I found out that this way of hacking is called XSS. The thing is, I tried some XSS codes on my website and it doesn't work at all.
Also, I've done a virus scan on my l ...
Go to the complete details ...