Exploit Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting

[Exploiter]

EDB-ID

29741

Проверка EDB

1. Пройдено

Автор

AVIV RAFF

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2007-1499

Дата публикации

2007-03-14

Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting

source: https://www.securityfocus.com/bid/22966/info

Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to spoof the contents of the Navigation canceled page, steal cookie-based authentication credentials, and obtain other sensitive information. Successful exploits may assist in phishing or other attacks that rely on content spoofing. 

res://ieframe.dll/navcancl.htm#http://www.example.com/[script]