« on: January 15, 2007, 11:01 PM »
Vulnerabilties identified in Google software!
Hard to believe but true: there’s another vulnerability currently live on Google’s servers, allowing a malicious hacker to point you to a (long) Google.com URL... and then receive your cookie data, with which the hacker can access and modify your Google docs and spreadsheets, and view your email subjects & first words, your search history (if enabled) and much more... similar to the previous vulnerability.
I was able to reproduce the cross-site scripting problem here on Firefox 2, latest stable, and all it took for me was to write a 3-line PHP script, upload it to my server, and adjust the Google URL in question. Then I tested this using two different computers, with different IPs, and was able to steal the cookie and login to Google...
Kenneth P. Reeder, Ph.D.
Clinical Psychologist
Jacksonville, North Carolina 28546
« Last Edit: January 15, 2007, 11:03 PM by KenR »
