Quantcast
Channel: CodeSection,代码区,网络安全 - CodeSec
Viewing all articles
Browse latest Browse all 12749

Researcher reports XSS hole in Google France

0
0

Security researchers have disclosed an cross-site scripting vulnerability in Google France.

The flaw is the third most common web application security hole on the internet, and is commonly exploited in mass defacements and automated attacks.

Issam Rabhi ( @issam_rabhi ), researcher with French security outfit Sysdream, reported the flaw to Google on August 5th.

Google fixed the flaw four days after the report with Mountain View's web security man Krzysztof Kotowicz telling Rabhi 'nice catch'.


Researcher reports XSS hole in Google France

XSS proof of concept. Image Issam Rabhi.

The mess "... allows attackers to deliver malicious code to victims which can compromise data and hijack browser sessions. may lead to private information compromise, cookie theft or even browser take over," Rabhi says .

The researcher posted a proof-of-concept exploit after the hole was patched. He says he did not submit the bug under Google's popular bug bounty program, preferring kudos to cash on this occasion.

Sponsored: IBM FlashSystem V9000 product guide


Viewing all articles
Browse latest Browse all 12749

Latest Images

Trending Articles





Latest Images