Weird Garbage code in address inputs

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • cpp-dev
    Mivite


    • Jun 2017
    • 178

    #1

    Weird Garbage code in address inputs

    This morning while checking the log notifications I saw an order was not processing properly. When I viewed it in the Admin page I found injected JavaScript code in the address. See Image.

    Has anyone else see this sort of thing?

    The script caused no real harm, but would like to know to maybe keep it from happening again.
    Attached Files
  • habreu
    Mighty Mivite




    • Apr 2010
    • 869

    #2
    This doesn't answer you question on how to prevent but found this online and indicates it might be an xss cross site scripting attempt

    Hello I received a signup this morning where a customer placed this code on the name and address fields Has anyone experienced this and what is this person trying to achieve or has achieved ? Name: Linda'">

    Comment

    • cpp-dev
      Mivite


      • Jun 2017
      • 178

      #3
      Yeah, that's the impression I got. Was just wondering if anyone else has seen similar in their use.

      Comment

      Working...
      X