bigbuck
January 11th, 2005, 09:25 AM
http://secunia.com/multiple_browsers_window_injection_vulnerability_test/
{QUOTE-> Test Case / Demonstration
This demonstration will open the USA Today web site in a new window. On the USA Today web site, you have to click a link labelled "Day in Pictures", which is located in the menu on the left side of the USA Today web site.
Start the test: Click the first link if you have a pop-up blocker enabled, or the second link if you do not have a pop-up blocker enabled.
With Pop-up Blocker:
Test Now - With Pop-up Blocker - Left Click On This Link
Without Pop-up Blocker:
Test Now - Without Pop-up Blocker - Left Click On This Link
Please note. If you wish to run the test multiple times, then please refresh this page before each test.
Result
You are vulnerable, if a pop-up window opened and showed information from Secunia and not from USA Today.. <-QUOTE}
{QUOTE-> Test Case / Demonstration
This demonstration will open the USA Today web site in a new window. On the USA Today web site, you have to click a link labelled "Day in Pictures", which is located in the menu on the left side of the USA Today web site.
Start the test: Click the first link if you have a pop-up blocker enabled, or the second link if you do not have a pop-up blocker enabled.
With Pop-up Blocker:
Test Now - With Pop-up Blocker - Left Click On This Link
Without Pop-up Blocker:
Test Now - Without Pop-up Blocker - Left Click On This Link
Please note. If you wish to run the test multiple times, then please refresh this page before each test.
Result
You are vulnerable, if a pop-up window opened and showed information from Secunia and not from USA Today.. <-QUOTE}