Google Blogoscoped

Forum

New XSS vulnerability on Google

Juha-Matti Laurio [PersonRank 10]

Friday, November 2, 2007
1 year ago345 views

Details at
xssed.com/mirror/24521/

This You Got Stallown3d! picture was seen earlier too...

James Xuan [PersonRank 10]

1 year ago #

Huh?

Colin Colehour [PersonRank 10]

1 year ago #

I don't understand what your talking about either.

Juha-Matti Laurio [PersonRank 10]

1 year ago #

The comment means the following:

The picture 'You Got Stallown3d' is very familiar in XSS reports, it is being used to demonstrate downloading pictures from 3rd party Web site.

I hope this will help.

Philipp Lenssen [PersonRank 10]

1 year ago #

Last time Tony checked, around a week ago or so, Google still didn't have the old XSS exploit fixed either – and they were alerted to it. I'm talking about this one: blogoscoped.com/archive/2007-0 ...

Juha-Matti Laurio [PersonRank 10]

1 year ago #

This specific issue (#24521 at Xssed.com) is marked as Fixed.
Sorry for including this information to the post.

Additionally, there is another issue too, link:
xssed.com/mirror/24483/

At time of writing, this issue is fixed as well (and was fixed before the weekend too).

Good work, Google security team!

This thread is locked as it's old... but you can create a new thread in the forum. 

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement (advertise here?) Find the right keywords for your campaigns at KeywordDiscovery.com Google Apps Hacks (book)
Advertise here?

 

This site unofficially covers Google™ and more with some rights reserved. You can subscribe to the feed, email your tips and join our forum!