WHID 2006-18: Myspace.com - Intricate Script Injection Vulnerability

Forget putting <script> tags in input field. This high tech vulnerability exploits the code handling online/offline flags by inserting a malicious online/offline flag. Awesome.

Additional information:

• Myspace.com - Intricate Script Injection Vulnerability [Justin Lavoie, Apr 5 2006]