• info
• discussion
• exploit
• solution
• references

WebKit 'window.console._inspectorCommandLineAPI' Property Cross Domain Scripting Vulnerability

WebKit is prone to a cross-domain scripting vulnerability because it fails to properly enforce the same-origin policy.

An attacker can exploit this issue to execute arbitrary code in the context of a different domain. Successful exploits may result in privilege escalation.