U.S. Bank and Bank of America Websites Vulnerable

Cross-site scripting weaknesses have been discovered in two websites belonging to the Bank of America and U.S. Bank. The flaws facilitate potential phishing attacks, because they allow attackers to inject IFrames, hijack sessions, or prompt arbitrary alerts. Cross-site scripting, more common... [ read more >> ]