[Argeniss] Alert - Yahoo! Mail XSS vulnerability

2006-04-28 Thread Cesar
Yahoo! Mail XSS vulnerability Description: Yahoo! Mail is a very insecure and free Web Mail service. It allows HTML messages but it has filters to avoid malicius script being executed on users browsers. On 17 April 2006 I received a message that when viewed it redirected to a fake Yahoo! Mail

Yahoo! Mail XSS Vulnerability

2006-04-23 Thread Cheng Peng Su
Adivisory Name : Yahoo! Mail XSS Vulnerability Release Date : 2006.04.21 Application : Yahoo! web-based email service Test On : Microsoft IE 6.0 Discover : Cheng Peng Su(applesoup_at_gmail.com) Description: Yahoo! Mail is one of the Internet's most popular web based email solutions. De