Full Disclosure mailing list archives
YouTube remote unsubscribe exploit
From: Harry Strongburg <harry.fd () harry lu>
Date: Wed, 25 Aug 2010 17:13:39 +0000
A remote unsubscribe exploit has been discovered by an unknown source. This allows for a remote user to ubsubscribe another user's subscribers. Example code: http://pastebin.com/raw.php?i=3DrGbSMy http://pastie.org/1115557.txt You may also manually test out this bug. Send the ubsubscribe request numerous times and watch the count of other subscribes go down. Again, I did not write or discover this problem. It is already well known, and I just hope you users here benefit from knowing about it. Keep safe! _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- YouTube remote unsubscribe exploit Harry Strongburg (Aug 26)