BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
RE: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
Jan 27 2007 09:26PM
Ahmed Sheipani (sheipani gmail com)
Hello
I have just tested this with Yahoo! Messenger 8.1.0.209 , and it does not
seem to work..
However, I noticed that after setting the FirstName parameter to a very long
one, the automatic notification message does not appear anymore.
-----Original Message-----
From: hainamluke (at) yahoo (dot) com [email concealed] [mailto...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
I have just tested this with Yahoo! Messenger 8.1.0.209 , and it does not
seem to work..
However, I noticed that after setting the FirstName parameter to a very long
one, the automatic notification message does not appear anymore.
-----Original Message-----
From: hainamluke (at) yahoo (dot) com [email concealed] [mailto...
[ more ]