Home page logo
/

bugtraq logo Bugtraq mailing list archives

JS embedding @ yahoo.com
From: Alan McCaig <alanmccaig () yahoo co uk>
Date: 28 Mar 2002 11:48:25 -0000



Any user can embed JavaScript into there yahoo 
profiles. When the user selects to change his picture 
then selects point to a photo on the Web. They can 
then embed javascript on the end of the url. An 
example of this can be viewed here 
http://uk.profiles.yahoo.com/embeddedjs
This has been active for a while now and yahoo have 
still took no action in fixing it.


  By Date           By Thread  

Current thread:
  • JS embedding @ yahoo.com Alan McCaig (Mar 29)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]