jnaneswarisd

 Profile Answers by jnaneswarisd 

• May 29th, 2009

 

Ajax-based web applications are vulnerable to the same hacking methodologies as 'normal' applications.

The Ajax engine uses JS to capture the user commands and to transform them into function calls. Such function calls are sent in plain visible text to the server and may easily reveal database table fields such as valid product and user IDs, or even important variable names, valid data types or ranges, and any other parameters which may be manipulated by a hacker. 

With this information, a hacker can easily use AJAX functions without the intended interface by crafting specific HTTP requests directly to the server.

Bhaumik Mehta

• May 8th, 2015

 

1. Source code written in AJAX is easily human readable.

2. Attackers can easily insert scripts into the system.

3. JSON data leakage.

4. Database detail can be obtained easily.

RaviKumar

• Jun 28th, 2015

 

Source code written in AJAX is easily human readable

Masroor

• Dec 28th, 2017

 

Security point of view, hackers can hack the script and send there pages to respond, where they may get confidential data