Cross Site Scripting (XSS) Vulnerability in Google
Ucha Gobejishvili Hacker with codename "longrifle0x" discovered another Cross Site Scripting (XSS) Vulnerability in Google's Website. He already reported about the Vulnerability to Google Security Experts.
Proof of Concept:
- Open https://www.google.com/a/cpanel/premier/new3?hl=en and Click Find Domain .
- Put xss code: <IFRAME SRC="javascript:alert('XSS');"></IFRAME>
Another XSS Vulnerabilities Discovered by longrifle0x http://xssed.com/archive/author=longrifle0x/special=1/
Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.
