[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection
- To: "Seth Fogie" <seth@xxxxxxxxxxxxxx>, full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection
- From: reepex <reepex@xxxxxxxxx>
- Date: Tue, 23 Oct 2007 13:22:36 -0500
On 10/23/07, Seth Fogie <seth@xxxxxxxxxxxxxx> wrote:
>
> * Risk Level:*
> High - Spoofed log records / Injected JavaScript can lead to malware
> attacks
>
>
Risk level high and javascript do not belong together
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/