Professional 1.6.03
Summary: PortSwigger released Burp Suite Professional 1.6.03 on Monday, 28 July 2014, adding a new engine for static analysis of JavaScript code. The release lets Burp Scanner report new vulnerability classes including DOM-based XSS, JavaScript injection, client-side SQL injection, WebSocket hijacking, DOM-based open redirection, cookie manipulation, Ajax request header manipulation, DOM-based denial of service, web message manipulation, and HTML5 storage manipulation.
What you should know: The scanner now covers ten client-side and DOM-based vulnerability classes that server-side scanning misses, so any JavaScript-heavy application tested with an older Burp build would have gone unexamined for all of them.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026