Try this in IE

Post by **Fender** » Wed Feb 11, 2009 8:12 pm

http://www.heise.de/security/dienste/br ... ogo_en.jpg

edit: good, embedded images don't run the JavaScript

Post by **axbaby** » Wed Feb 11, 2009 8:39 pm

i am vulnerable right now .. be nice to me or i will start crying.

Post by **4days** » Wed Feb 11, 2009 8:40 pm

Post by **bork[e]** » Wed Feb 11, 2009 8:57 pm

ie just said omg I'm vulnerable, is that all that happens?

Post by **Peenyuh** » Wed Feb 11, 2009 10:52 pm

bork[e] wrote:ie just said omg I'm vulnerable, is that all that happens?

That, and yer entire porn collection just got downloaded to Fenders comp.

Post by **Fender** » Thu Feb 12, 2009 1:45 am

bork[e] wrote:ie just said omg I'm vulnerable, is that all that happens?

Here's a hint, it could execute arbitrary JavaScript, for starters. So I could probably insert some JS to read any cookies for the domain displaying the image and post them to a web server.

Post by **Scourge** » Thu Feb 12, 2009 3:39 am

I got a red x.

Post by **MKJ** » Thu Feb 12, 2009 8:41 am

so wait, you tried to hack all q3w members and then when it failed you tried to pass it off as "good security"?

earmarked

Try this in IE

Try this in IE

Re: Try this in IE

Re: Try this in IE

Re: Try this in IE

Re: Try this in IE

Re: Try this in IE

Re: Try this in IE

Re: Try this in IE