Main » 2011 » Март » 16 » Safety icq xss vulnerability on icq com
12:12
Safety icq xss vulnerability on icq com
A few days ago on the site icq.com was found two xss vulnerabilities, notably, both of them active.
One of the vulnerabilities had already closed the place in their profiles, in the "About Me" your room. Directly from the ICQ client you can write your JS-code, which, respectively, on the page is successfully executed (http://www.icq.com/user_profile/% Vash_nomer% /). Now vulnerability is closed, at what disabling this service, you now have any number issued to 404, but it works the old form of profiles (http://www.icq.com/people/about_me.php?uin =% Vash_nomer%).
The second vulnerability was present in the blogging service (http://blogs.icq.com/blogs/), than when it is not filtered the message body.
However, the stolen cookies are not allowed either to change the password or enter the site, since apparently had to bind to IP-address. It would seem that in this case the XSS vulnerability is absolutely useless, but it was not there. In fact, on icq.com there is another type of vulnerability, less used, but no less dangerous, it's CSRF vulnerability. The essence of uyazmiosti was ustnovke secret questions / answers to a number, it is possible to make a direct link:
