Full Disclosure mailing list archives

Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how here and now...


From: ghost <ghosts () gmail com>
Date: Sat, 11 Jun 2011 22:01:03 -0700

From what i've gathered... you believe that Anchor
Text<http://en.wikipedia.org/wiki/Anchor_text> is
an exploit ? ......cereal <http://dictionary.reference.com/browse/seriously>
 ?


On Sat, Jun 11, 2011 at 8:09 PM, -= Glowing Doom =- <secn3t () gmail com>wrote:

Here again....

I will write a sentence now, and, i will just copy, so it is 'darkened'
text , then with NO backspace just leave the text darkened, and goto 'link'
, and enter a link.. the text will turn to red.


(this is the easiest way to reproduce it...) <http://www.haxxor-NOT.bs>






_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: