WebKit 1.2.x – Local Webpage Cross Domain Information Disclosure

• Exploit Database
• 20 阅读

• 作者： Aaron Sigel
  日期： 2011-03-09
• 类别：

  • remote
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/35434/

• source: https://www.securityfocus.com/bid/46816/info
  
  WebKit is prone to a cross-domain scripting vulnerability because it fails to properly enforce the same-origin policy.
  
  Successfully exploiting this issue will allow attackers to send the content of arbitrary files from the user's system to a remote server controlled by them. This results in disclosure of potentially sensitive information which may aid in further attacks. 
  
  https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35434.zip