This shows you the differences between two versions of the page.
| |
company_names [2020-11-03 15:07] – created nik | company_names [2020-11-03 15:07] (current) – nik |
---|
| |
* [[https://www.theregister.com/2020/10/30/companies_house_xss_silliness/|"Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it"]] | * [[https://www.theregister.com/2020/10/30/companies_house_xss_silliness/|"Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it"]] |
* "; DROP TABLE "COMPANIES";-- LTD" and "SAFDASD & SFSAF \' SFDAASF\" LTD", both of which were exploiting the availability of punctuation marks to put commands into the company name field. | * [[https://find-and-update.company-information.service.gov.uk/company/10542519|"; DROP TABLE "COMPANIES";-- LTD"]] and "SAFDASD & SFSAF \' SFDAASF\" LTD", both of which were exploiting the availability of punctuation marks to put commands into the company name field. |
* https://find-and-update.company-information.service.gov.uk/company/10542519 | |
* [[https://find-and-update.company-information.service.gov.uk/company/12956509|THAT COMPANY WHOSE NAME USED TO CONTAIN HTML SCRIPT TAGS LTD]] | * [[https://find-and-update.company-information.service.gov.uk/company/12956509|THAT COMPANY WHOSE NAME USED TO CONTAIN HTML SCRIPT TAGS LTD]] |
| |