Mozilla Fizzle addon crossite access
Published:		25.03.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7466
Type:		client
Level:		5/10

Affected:		MOZILLA : Fizzle 0.5
CVE:		CVE-2007-1678 (Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler.)

Original document

CrYpTiC MauleR, [Full-disclosure] Fizzle : Firefox Extension Vulnerability (25.03.2007)

Discuss:

Read or add your comments to this news (0 comments)