Bugtraq mailing list archives
Re: XSIO - Cross Site Image Overlaying
From: "Tod Beardsley" <todb () planb-security net>
Date: Mon, 10 Sep 2007 16:01:27 -0500
On 9/10/07, Sven Vetsch / Disenchant <sven.vetsch () disenchant ch> wrote:
I wasn't able to find something written about [cross site image overlay]
FYI, this was discussed as a "Trojaned Navigation Menu" attack, detailed on the Month of Myspace Bugs page back in April (and November of 2006). http://momby.livejournal.com/4250.html Just for some historical perspective and existing research on the subject. If the attacker has control of element positioning, he has control over all the link targets in a document. -- todb () planb-security net | ICQ: 335082155 | Note: Due to Google's privacy policy <http://tinyurl.com/5xbtl> and the United States' policy on electronic surveillance <http://tinyurl.com/muuyl>, please do not IM/e-mail me anything you wish to remain secret.
Current thread:
- XSIO - Cross Site Image Overlaying Sven Vetsch / Disenchant (Sep 10)
- Re: XSIO - Cross Site Image Overlaying Tod Beardsley (Sep 10)