Full Disclosure mailing list archives
Re: Google is vulnerable from XSS attack
From: n3td3v <xploitable () gmail com>
Date: Mon, 5 Dec 2005 02:57:57 +0000
[drama] [wild imagination] ***Millions of e-mail addresses exposed to hackers*** *Hacker gets access to every group, made easier by his/her worm script (likely a hacker would do this) *Hacker harvests all e-mail addresses exposed and sells to spammer (likely a hacker would do this) *Hacker deletes all groups on network, made easier by his/her worm script (unlikely a hacker would do this) Assuming the hacker still has access to administrative controls for every group, he/she can conitinue to harvest new e-mail addresses and delete groups with the flaw patched. How much is an e-mail list of that size worth to spammers? I'm sure a hacker always fancied being a millionaire. [/wild imagination] [/drama] On 12/3/05, bugtraq () cgisecurity net <bugtraq () cgisecurity net> wrote:
XSS is 'starting' to get fairly useful.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Google is vulnerable from XSS attack n3td3v (Dec 02)
- Re: Google is vulnerable from XSS attack php0t (Dec 02)
- Re: Google is vulnerable from XSS attack InfoSecBOFH (Dec 03)
- Re: Google is vulnerable from XSS attack n3td3v (Dec 03)
- Re: Google is vulnerable from XSS attack bugtraq (Dec 03)
- Re: Google is vulnerable from XSS attack n3td3v (Dec 04)
- Re: Google is vulnerable from XSS attack ghost (Dec 05)
- Re: Google is vulnerable from XSS attack InfoSecBOFH (Dec 04)
- RE: Google is vulnerable from XSS attack Joseph Pierini (Dec 04)
- Re: Google is vulnerable from XSS attack InfoSecBOFH (Dec 03)
- Re: Google is vulnerable from XSS attack php0t (Dec 02)
- RE: Re: Google is vulnerable from XSS attack Joseph Pierini (Dec 05)
- Re: Re: Google is vulnerable from XSS attack n3td3v (Dec 07)
- RE: Re: Google is vulnerable from XSS attack jpierini (Dec 07)
- Message not available
- Re: Re: Google is vulnerable from XSS attack n3td3v (Dec 07)
- Re: Re: Google is vulnerable from XSS attack Morning Wood (Dec 07)
- Re: Re: Google is vulnerable from XSS attack n3td3v (Dec 07)