Collected research

Cross-Channel Scripting and Reverse Cross-Channel Scripting

Hristo Bojinov, Elie Bursztein, Eric Lovett and Dan Boneh · blackhat.com

Stanford audited 21 embedded devices from 16 brands - NAS, switches, IP cameras, photo frames, phones, routers, printers and lights-out modules - and found every one vulnerable. It names cross-channel scripting: script stored through FTP, SMB, SIP, BitTorrent or a serial console that the device's web interface later reflects, plus reverse XCS to steal files. Over 40 bugs went to CERT.

Record

Researcher

Hristo Bojinov, Elie Bursztein, Eric Lovett and Dan Boneh

Published by

blackhat.com

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2009 research round

Tags

• xss
• csrf
• injection
• measurement-study
• info-leak
• auth-bypass
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Hristo Bojinov, Elie Bursztein, Eric Lovett and Dan Boneh, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.