<div style="display:inline;float:right;margin-left:1em"><g:plusone href="https://www.searchenginegenie.com/blog-seo/google-toolbar-input-validation-hole-in-about-page-lets-local-users-execute-scripting-code/"></g:plusone></div>
<div style="display:inline;float:right;margin-left:1em"><g:plusone href="https://www.searchenginegenie.com/blog-seo/google-toolbar-input-validation-hole-in-about-page-lets-local-users-execute-scripting-code/"></g:plusone></div>
{"id":56,"date":"2004-09-22T13:41:00","date_gmt":"2004-09-22T17:41:00","guid":{"rendered":"http:\/\/www.searchenginegenie.com\/blog-seo\/google-toolbar-input-validation-hole-in-about-page-lets-local-users-execute-scripting-code\/"},"modified":"2012-09-20T06:35:45","modified_gmt":"2012-09-20T10:35:45","slug":"google-toolbar-input-validation-hole-in-about-page-lets-local-users-execute-scripting-code","status":"publish","type":"post","link":"https:\/\/www.searchenginegenie.com\/blog-seo\/google-toolbar-input-validation-hole-in-about-page-lets-local-users-execute-scripting-code\/","title":{"rendered":"Google Toolbar Input Validation Hole in &#8216;About&#8217; Page Lets Local Users Execute Scripting Code"},"content":{"rendered":"<p>it seems google toolbar about Us page has some scripting error which is highly vulnerable, Following message was posting in the security tracker site,<\/p>\n<p><em>Date: Fri, 17 Sep 2004 09:51:10 +0100 (BST)From: ViPeR <vi*******@yahoo.co.in>Subject: GoogleToolbar:About &#8212; Allows Script Injection<\/p>\n<p>Affection Software : GoogleToolbar<\/p>\n<p>Version : Tested on 2.0.114.1-big\/en (GGLD)<\/p>\n<p>Notes:<\/p>\n<p>GoogleToolbar&#8217;s About section allows injection of<\/p>\n<p>script, since it lacks any checking. The following<\/p>\n<p>code is a Proof Of Concept.<\/p>\n<div>\n<p>rgds,<\/p>\n<p>Gregory R. Panakkal \/ Viper<\/em><\/div>\n<p><s> <\/p>\n<div><\/s><\/div>\n","protected":false},"excerpt":{"rendered":"<p>it seems google toolbar about Us page has some scripting error which is highly vulnerable, Following message was posting in the security tracker site, Date: Fri, 17 Sep 2004 09:51:10 +0100 (BST)From: ViPeR Subject: GoogleToolbar:About &#8212; Allows Script Injection Affection Software : GoogleToolbar Version : Tested on 2.0.114.1-big\/en (GGLD) Notes: GoogleToolbar&#8217;s About section allows injection [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-56","post","type-post","status-publish","format-standard","hentry","category-google"],"_links":{"self":[{"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/posts\/56","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/comments?post=56"}],"version-history":[{"count":1,"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/posts\/56\/revisions"}],"predecessor-version":[{"id":1683,"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/posts\/56\/revisions\/1683"}],"wp:attachment":[{"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/media?parent=56"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/categories?post=56"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.searchenginegenie.com\/blog-seo\/wp-json\/wp\/v2\/tags?post=56"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}