Mozilla CSS crossite scripting
Published:		29.01.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5710
Type:		client
Level:		5/10
Description:		-moz-binding: CSS allows to bind XBL with element and XBL may contains scripts. It may lead to crossite sripting within e.g. webmail.

Affected:		MOZILLA : Firefox 1.0
		NETSCAPE : Netscape 8.1

Original document

Nikolas Coukouma, [Full-disclosure] -moz-binding CSS property: more XSS fun (29.01.2006)

Discuss:

Read or add your comments to this news (0 comments)