Major Yahoo Cross Site Scripting Vulnerability Endangers User Accounts, Email

Thread Rating:

0 Vote(s) - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

Major Yahoo Cross Site Scripting Vulnerability Endangers User Accounts, Email

06-16-2007, 09:51 AM,

Post: #1

mandy Offline

Administrator

Posts: 9,932
Likes Given: 0
Likes Received: 6 in 5 posts
Joined: Feb 2011
Reputation: 0

Major Yahoo Cross Site Scripting Vulnerability Endangers User Accounts, Email

Quote:Summary:

* Critical cross-site scripting (XSS) defect in Yahoo services is discovered
* Proof of concept of exploit is included
* XSS bugs are on the rise because of web 2.0+
* The web industry is mostly negligent about dealing with XSS...

The simple code to take over anyone's Yahoo account is included at the bottom fo this article. If you were to visit this naughty link, your web browser would show the last email in your inbox displayed on a web site that is not part of Yahoo. What the simple link does is allow a program to navigate through your email account pretending to be you and download emails onto the attackers web site, allowing them to read all your conversations with iheartsanjaya3 you met on myspace...

full article: http://netcooties.blogspot.com/2007/06/y...-care.html

« Next Oldest | Next Newest »

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Using Yahoo Site Explorer to Improve SEO	Kristijntje	0	2,405	12-29-2007, 03:15 PM Last Post: Kristijntje
	Optimizing your site for Yahoo Search	Kristijntje	0	2,528	09-22-2007, 01:05 PM Last Post: Kristijntje
	Yahoo Site Explorer adds new features for Webmasters	mandy	1	2,342	02-08-2007, 01:18 AM Last Post: jezebel
	Yahoo vs. Google, is a Yahoo/eBay merger in the making?	mandy	0	2,315	08-18-2006, 01:12 PM Last Post: mandy
	Yahoo adds new Webmaster features to Site Explorer	mandy	3	2,719	08-13-2006, 02:35 PM Last Post: BellisimaJ.
	Yahoo Search now redirecting Webmaster queries to Site Explorer	mandy	0	2,071	08-13-2006, 10:50 AM Last Post: mandy
	Yahoo! launches new version of its Yahoo! Slurp search crawler	mandy	2	2,862	08-02-2006, 04:11 AM Last Post: jezebel
	Yahoo Buys Calendar Site Upcoming.org	mandy	0	2,033	10-05-2005, 10:22 AM Last Post: mandy
	Yahoo Ups Ante With Site Explorer	mandy	0	2,031	10-05-2005, 10:15 AM Last Post: mandy

Forum Jump:

Users browsing this thread: 1 Guest(s)