Collected research

Stored XSS Vulnerability @ Amazon

Research: Remarkable 2nd order XSS @ Amazon or How to hack Amazon with a book

Dirk Wetter · drwetter.eu

Amazon's search-inside-this-book feature passed matched book text unfiltered into a tooltipText variable, so script printed in a published book executed when a shopper moused over a search result. Web security books already contain such payloads, making the printed page itself the injection channel into amazon.de, .co.uk and .com.

Record

Document

Research: Remarkable 2nd order XSS @ Amazon or How to hack Amazon with a book

Researcher

Dirk Wetter

Published by

drwetter.eu

Topic

XSS

In the archive

• Collected in the 2010 research round

Tags

• xss
• case-study
• dom
• encoding
• charset
• filter-bypass
• owasp-a02-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Dirk Wetter, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 16 August 2026.