Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger

Subject: Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
Date: 27 Jan 2007 02:51:58 -0000
From: suppressed

This Vulnerability works even when you put your script (<img src="javascript:alert('Executed from ' + top.location)" >) in nickname and you can insert HTML codes in Nickname and Lastname.

Prev by Date: [USN-398-4] Firefox regression
Next by Date: Open Conference Systems = 2.8.2 Remote File Inclusion
Previous by thread: RE: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
Next by thread: PHP Membership Manager Cross-Site Scripting Vulnerability
Index(es):
- Date
- Thread

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.