[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Facebook Url Redirection Vuln.

To: Anthony Dubuissez <anthony.dubuissez@xxxxxxxxx>
Subject: Re: Facebook Url Redirection Vuln.
From: Jann Horn <jann+libev@xxxxxxxxx>
Date: Thu, 11 Jul 2013 18:04:13 +0200

On Thu, Jul 11, 2013 at 04:35:21PM +0200, Anthony Dubuissez wrote:
> Isn't it a MitM situation ? if you can intercept that value you can intercept 
> more than a simple parameter no ?

If you're the target site of the original link, you just need to look at the 
referrer. Stupid referrers.

Attachment: signature.asc
Description: Digital signature

References:
- Facebook Url Redirection Vuln.
  - From: CANSIN YILDIRIM
- Re: Facebook Url Redirection Vuln.
  - From: Anthony Dubuissez

Prev by Date: Re: Facebook Url Redirection Vuln.
Next by Date: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
Previous by thread: Re: Facebook Url Redirection Vuln.
Next by thread: Re: Wordpress wp-private-messages Plugin Sql Injection vulnerability
Index(es):
- Date
- Thread