Your browser either does not support JavaScript or it is disabled in your browser's settings. Please consult your browser's documentation for information about enabling this feature.
#ods_bar { margin: 0; padding: 0; width: 100%; float: left; clear: both; color: #444; font-size: 9pt; font-family: Arial, Helvetica, sans-serif; background-color: #ddeff9} #ods_bar ul { list-style-type: none} #ods_bar ul li { display: inline} #ods_bar a { text-decoration: none; color: inherit} #ods_bar img { float: none; border: 0; margin: 0} #ods_bar input { margin-right: 8px; font-size: 7pt; color: #555;} #ods_bar_handle { width: 10px; float: left} #ods_bar_content { float: left; width: 100%; background-color: #ddeff9} #ods_bar_top { float: left; width: 100%; background-color: #fff} #ods_bar_bot { float: left; clear: left; width: 100%; padding-top: 2px; padding-bottom: 2px; background-color: #85b9d2} #ods_bar_top_cmds { font-size: 7.5pt; margin-top: 4px; color: #42abc4; background-color: #fff; float: right; padding-right: 8px} #ods_bar_top_cmds img { vertical-align: middle;} #ods_bar_top_cmds a { text-decoration: none} #ods_bar_top_cmds a.user_profile_lnk { text-transform: none} #ods_bar_first_lvl { float: left; padding: 0; margin: 0; color: #fff; background: #0075A8 url("/ods/images/navlv1default.png")} #ods_bar_first_lvl li { padding: 0; padding-left: 4px; margin: 0} #ods_bar_first_lvl li a { margin-top: 0px; padding: 6px 3px 6px 3px; vertical-align: middle; color: #fff; /* Required due to buggy CSS in IE */} #ods_bar_first_lvl li a img { margin-top: 2px; margin-bottom: 5px; vertical-align: middle;} #ods_bar_first_lvl li.sel a { color: #455; background: #b1d4e5 url("/ods/images/navlv1sel.png")} #ods_bar_second_lvl { width: 100%; height: 20px; float: left; clear: left; margin: 0; padding: 0; padding-top: 4px; background: #ddeff9 url("/ods/images/navlv2default.png")} #ods_bar_second_lvl li { margin-right: 5px} #ods_bar_second_lvl li:first-child { margin-left: 27px;} #ods_bar_second_lvl li a { vertical-align: middle; color: #444; /* Required by buggy IE CSS implementation */ } #ods_bar_home_path { margin: 2px 0px 0px 36px; padding: 0; font-size: 8pt} .popup { position: absolute; background-color: #fff; border: 1px dotted #4800F4; padding: 0.5em; font-size: 80%; } #ods_bar_odslogin { font-size: 7.5pt; margin-top: 4px; color: #42abc4; background-color: #fff; float: right; padding-right: 8px; } #ods_bar_odslogin img { vertical-align: middle; margin-left: 8px; } #ods_bar_odslogin a { margin-left: 3px; color: inherit; text-decoration: none; }
Loading... please wait.
Sign In
| Sign Up
Community
Briefcase
Weblog
Wiki
Bookmarks
Tags
Sign In
| Sign Up |
Help
|
About
Comunity blog
kidehen@openlinksw.com's BLOG [127]
uda's BLOG [135]
vdb's BLOG [136]
more...
ODS Home
> Weblog
OAT Management's Weblog
You are not logged in
Login
Weblog
|
LinkBlog
|
Summary
|
Archive
|
Search
Subscribe
Atom 1.0
RSS 2.0
RDF RSS 1.0
OCS
OPML
XBEL
Display Settings
articles per page.
descending
ascending
order.
April 4, 2007
04:18
OAT and JS Hijacking
OAT and JS Hijacking There has been some recent buzz regarding security issues of Web 2.0 sit...
with tags:
oat
|
security
|
json
|
ajax
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17ZzOPEB1d
|
17
|
-1 OR 2+178-178-1=0+0+0+1 --
|
-1 OR 2+206-206-1=0+0+0+1
|
-1' OR 2+34-34-1=0+0+0+1 --
|
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
|
-1" OR 2+260-260-1=0+0+0+1 --
|
17*if(now()=sysdate()
|
sleep(15)
|
0)
|
170'XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR'Z
|
170"XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR"Z
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
|
17-1; waitfor delay '0:0:15' --
|
17-1); waitfor delay '0:0:15' --
|
17-1 waitfor delay '0:0:15' --
|
17fbJv0bsw'; waitfor delay '0:0:15' --
|
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
|
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
|
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
|
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
|
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
|
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
|
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
|
15)
|
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
|
15)||'
|
17
|
17'"
|
17'"%2527%2522\'\"
|
@@6I2gi
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
On del.icio.us:
oat
|
security
|
json
|
ajax
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17ZzOPEB1d
|
17
|
-1 OR 2+178-178-1=0+0+0+1 --
|
-1 OR 2+206-206-1=0+0+0+1
|
-1' OR 2+34-34-1=0+0+0+1 --
|
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
|
-1" OR 2+260-260-1=0+0+0+1 --
|
17*if(now()=sysdate()
|
sleep(15)
|
0)
|
170'XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR'Z
|
170"XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR"Z
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
|
17-1; waitfor delay '0:0:15' --
|
17-1); waitfor delay '0:0:15' --
|
17-1 waitfor delay '0:0:15' --
|
17fbJv0bsw'; waitfor delay '0:0:15' --
|
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
|
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
|
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
|
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
|
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
|
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
|
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
|
15)
|
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
|
15)||'
|
17
|
17'"
|
17'"%2527%2522\'\"
|
@@6I2gi
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
On technorati:
oat
|
security
|
json
|
ajax
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17ZzOPEB1d
|
17
|
-1 OR 2+178-178-1=0+0+0+1 --
|
-1 OR 2+206-206-1=0+0+0+1
|
-1' OR 2+34-34-1=0+0+0+1 --
|
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
|
-1" OR 2+260-260-1=0+0+0+1 --
|
17*if(now()=sysdate()
|
sleep(15)
|
0)
|
170'XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR'Z
|
170"XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR"Z
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
|
17-1; waitfor delay '0:0:15' --
|
17-1); waitfor delay '0:0:15' --
|
17-1 waitfor delay '0:0:15' --
|
17fbJv0bsw'; waitfor delay '0:0:15' --
|
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
|
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
|
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
|
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
|
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
|
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
|
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
|
15)
|
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
|
15)||'
|
17
|
17'"
|
17'"%2527%2522\'\"
|
@@6I2gi
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
January
February
March
April
May
June
July
August
September
October
November
December
2007
Sun
Mon
Tue
Wed
Thu
Fri
Sat
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
<
today
Tag Cloud
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1 OR 2+178-178-1=0+0+0+1 --
-1 OR 2+206-206-1=0+0+0+1
-1" OR 2+260-260-1=0+0+0+1 --
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
-1' OR 2+34-34-1=0+0+0+1 --
0)
0))XOR"Z
0))XOR'Z
15)
15)||'
17
17'"
17'"%2527%2522\'\"
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
17*if(now()=sysdate()
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
17-1 waitfor delay '0:0:15' --
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
17-1); waitfor delay '0:0:15' --
17-1; waitfor delay '0:0:15' --
170"XOR(17*if(now()=sysdate()
170'XOR(17*if(now()=sysdate()
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
17ZzOPEB1d
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
17fbJv0bsw'; waitfor delay '0:0:15' --
@@6I2gi
ajax
json
oat
oat data access
oat dom api
oat gallery timeline ajax
oat release rdf browser improvements
security
sleep(15)
Running on Linux platform