Wednesday, September 22, 2004
it seems google toolbar about Us page has some scripting error which is highly vulnerable, Following message was posting in the security tracker site,
Date: Fri, 17 Sep 2004 09:51:10 +0100 (BST)From: ViPeRSubject: GoogleToolbar:About -- Allows Script Injection
Affection Software : GoogleToolbar
Version : Tested on 2.0.114.1-big/en (GGLD)
Notes:
GoogleToolbar's About section allows injection of
script, since it lacks any checking. The following
code is a Proof Of Concept.
rgds,
Gregory R. Panakkal / Viper
Earthlink
Netscape
Netvouz
RawSugar
Shadows
Sphinn
StumbleUpon
Yahoo MyWeb
Date: Fri, 17 Sep 2004 09:51:10 +0100 (BST)From: ViPeR
Affection Software : GoogleToolbar
Version : Tested on 2.0.114.1-big/en (GGLD)
Notes:
GoogleToolbar's About section allows injection of
script, since it lacks any checking. The following
code is a Proof Of Concept.
rgds,
Gregory R. Panakkal / Viper
posted by power
@ 10:41 AM
permanent link | Post a Comment |
0 Comments:
Post a Comment
<< Home