what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Yahoo! Pulse Cross Site Scripting

Yahoo! Pulse Cross Site Scripting
Posted May 18, 2011
Authored by Thinh Q. Hoang | Site bluemoon.com.vn

Yahoo! Pulse suffers from a cross site scripting vulnerability.

tags | advisory, xss
SHA-256 | c1c38341d2cb76a8d8f00a598c33bfb95c34ff60780b7f2854abb13af90d322c

Yahoo! Pulse Cross Site Scripting

Change Mirror Download
BLUE MOON SECURITY ADVISORY 2011-02
===================================


:Title: Cross site scripting vulnerability in Yahoo! Pulse
:Severity: Critical
:Reporter: Thinh Q. Hoang and Blue Moon Consulting
:Products: Yahoo! Pulse
:Fixed in: latest version


Description
-----------

Yahoo! Pulse is a new Yahoo! product that allows you to keep in touch with your friends. We’ve made it easier to stay connected to the people who matter most and share what’s important!

Yahoo! Pulse suffers from a XSS vulnerability in its photo upload feature. If the file's name is ``junk" onmouseover=alert(document.cookie) "junk.jpg``, the page is injected with JavaScript.

Workaround
----------

There is no workaround.

Fix
---

A fix has been rolled out by Yahoo!.

Disclosure
----------

Blue Moon Consulting adapts `RFPolicy v2.0 <http://www.wiretrip.net/rfp/policy.html>`_ in notifying vendors.

:Initial vendor contact:

May 10, 2011: Initial query sent to Yahoo! Security Team (YST).

:Vendor response:

May 11, 2011: YST asked for steps to reproduce the bug.

:Further communication:

May 11, 2011: Details sent to YST, encrypted.

May 12, 2011: YST sent a reply, encrypted with their PUBLIC key!

May 12, 2011: Request sent to YST to re-send the last message.

May 13, 2011: YST re-sent the last message.

May 16, 2011: YST informed us the bug was fixed.

May 17, 2011: Confirmation sent to YST.

:Public disclosure: May 18, 2011

:Exploit code:

No exploit code required.

Disclaimer
----------

The information provided in this advisory is provided "as is" without warranty of any kind. Blue Moon Consulting Co., Ltd disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. Your use of the information on the advisory or materials linked from the advisory is at your own risk. Blue Moon Consulting Co., Ltd reserves the right to change or update this notice at any time.


--
Nam Nguyen, CISA, CISSP, CSSLP
Blue Moon Consulting Co., Ltd
http://www.bluemoon.com.vn

Login or Register to add favorites

File Archive:

March 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    13 Files
  • 3
    Mar 3rd
    15 Files
  • 4
    Mar 4th
    0 Files
  • 5
    Mar 5th
    0 Files
  • 6
    Mar 6th
    16 Files
  • 7
    Mar 7th
    31 Files
  • 8
    Mar 8th
    16 Files
  • 9
    Mar 9th
    13 Files
  • 10
    Mar 10th
    9 Files
  • 11
    Mar 11th
    0 Files
  • 12
    Mar 12th
    0 Files
  • 13
    Mar 13th
    10 Files
  • 14
    Mar 14th
    6 Files
  • 15
    Mar 15th
    17 Files
  • 16
    Mar 16th
    22 Files
  • 17
    Mar 17th
    13 Files
  • 18
    Mar 18th
    0 Files
  • 19
    Mar 19th
    0 Files
  • 20
    Mar 20th
    16 Files
  • 21
    Mar 21st
    13 Files
  • 22
    Mar 22nd
    5 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close