full-disclosure - Re: [0 Day] XSS Persistent in Blogspot of Google

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CACHAsReP-t9PK2bvVYVmXxoMRYkfW18sfDwU91-A+sMG1-FXZA@mail.gmail.com>
Date: Tue, 22 Jan 2013 12:34:21 -0300
From: WHK Yan <yan.uniko.102@...il.com>
To: antrax.bt@...il.com
Cc: el-brujo@...acker.net, vuln@...unia.com,
	submissions@...ketstormsecurity.com, submit@...ecurity.com,
	full-disclosure@...ts.grok.org.uk, mr.inj3ct0r@...il.com,
	vuldb@...urityfocus.com, HQH <fdkaos2000@...oo.es>
Subject: Re: [0 Day] XSS Persistent in Blogspot of Google

ice catch! :-) congratulations, an colaborator can attack administrators
El 21/01/2013 20:01, "ANTRAX" <antrax.bt@...il.com> escribió:

> Hi all, I'm ANTRAX from Argentina, and I'm owner of www.underc0de.org
> Today, I going to shared with you about XSS in blogger. This is a very
> simple, but isn´t fix yet..
> This bug could be exploited by bloggers without administrator permissons.
>
> Steps to reproduce the XSS:
>
> 1.- Create a new post in the blog and insert some script
>
> [image: Imágenes integradas 1]
>
> 2.- When the administrator enter in the administration panel in
> "templates" section, blogger automatically executed the script, because
> blogger have a mini-preview in "Ahora en el blog", then execute the script
>
> [image: Imágenes integradas 2]
>
> 3.- Ready! the script has been executed!
>
> [image: Imágenes integradas 3]
>
> Also, you can steal cookies!
>
> [image: Imágenes integradas 4]
>
> I reported to google about it, but they not fixed yet.
>
> Kind regards partners!
>
> *ANTRAX*
>

Content of type "text/html" skipped

Download attachment "xss2.png" of type "image/png" (121499 bytes)

Download attachment "Blogger XSS.png" of type "image/png" (240406 bytes)

Download attachment "xss1.png" of type "image/png" (30859 bytes)

Download attachment "xss4.png" of type "image/png" (31412 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/