Times of India which operates a website called indiatimes.com is a top news website in India and elsewhere.
This ranks the Times of India as the top English daily in India by readership.
It can be used by attackers to bypass access controls such as the same origin policy (SOP).
He has found that the vulnerability occurs at Indiatimess URL links.
Indiatimes only party filters the filenames in its website.
Jing says due to this almost all URLs under Indiatimess Photogallery and Top-lists topics are affected by this vulnerability.
Jing says this is one to most popular mistakes webmasters make now a days.
source: www.techworm.net
