What is JavaScript hijacking / AJAX hijacking?

JavaScript hijacking is a method of hijacking data read by JavaScript-based Web applications by a hacker.

These attacks are increasing in number because they are relatively simply to execute and almost all major AJAX applications available are known to be vulnerable.

JavaScript hijacking can be executed on a Web site that is using Ajax: for example a hijacked Ajax application that is responsible for taking users' logins and passwords can read these and send them to the hacker.