BugTraq
Back to list
|
Post reply
Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
Jan 27 2007 02:51AM
Outlaw aria-security net
This Vulnerability works even when you put your script (<img src="javascript:alert('Executed from ' + top.location)" >) in nickname and you can insert HTML codes in Nickname and Lastname.
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
[ reply ]