CIA and NASA Websites Vulnerable to XSS Attacks, Hacker Proves

The official websites belonging to the Central Intelligence Agency (CIA) and the National Aeronautics and Space Administration (NASA) were found to contain serious cross-site scripting flaws by a hacker called D35M0nd142.

“First of all, this attack did not have any purpose or malicious damage. I just wanted to show that there is a bad vulnerability in a site of great importance as this, and need to be repaired,” the hacker said.

He didn’t provide any details, but his Pastebin posts were accompanied by images to prove his findings.

This is certainly not the first time when sites of the CIA and NASA were found to be flawed, but it seems they didn’t learn anything from past experiences.

The hacker in question, D35M0nd142, is also the one responsible for breaching MySQL for the third time this year, leaking tons of information belonging to members.