WebKit 1.2.x – Local Webpage Cross Domain Information Disclosure

• Exploit Database
• 132 阅读

• 作者： Aaron Sigel
  日期： 2011-03-09
• 类别：

  • remote
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/35434/
• 1 2 3 4 5 6 7 8

  source: https://www.securityfocus.com/bid/46816/info   WebKit is prone to a cross-domain scripting vulnerability because it fails to properly enforce the same-origin policy.   Successfully exploiting this issue will allow attackers to send the content of arbitrary files from the user's system to a remote server controlled by them. This results in disclosure of potentially sensitive information which may aid in further attacks.   https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35434.zip