[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Gmail XSS?
- To: Denzity <denzity@xxxxxxxxx>, full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Gmail XSS?
- From: Juha-Matti Laurio <juha-matti.laurio@xxxxxxxx>
- Date: Tue, 2 Jan 2007 01:20:19 +0200 (EET)
According to this news it was fixed already:
http://blogs.zdnet.com/Google/?p=434
See a quote of Google Security Team
- Juha-Matti
Denzity <denzity@xxxxxxxxx> wrote:
>
> There's reports of a gmail xss in the wild that will steal someone's contact
> list and email if they website is visited while being logged in to gmail.
>
> http://cyber-knowledge.net/blog/2007/01/01/gmail-vulnerable-to-contact-list-hijacking/
>
> I can't find this on Bugtraq or any release. Anyone have any more info or
> a PoC?
>
> Thanks, Denzity.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/