[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
From: Outlaw@xxxxxxxxxxxxxxxxx
Date: 27 Jan 2007 02:51:58 -0000

This Vulnerability works even when you put your script (<img 
src="javascript:alert('Executed from ' + top.location)" >) in nickname and you 
can insert HTML codes in Nickname and Lastname.

Prev by Date: [USN-398-4] Firefox regression
Next by Date: Open Conference Systems = 2.8.2 Remote File Inclusion
Previous by thread: Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
Next by thread: PHP Membership Manager Cross-Site Scripting Vulnerability
Index(es):
- Date
- Thread