Live data from Hacker News

Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft

labs.bitdefender.com

Post reply on HN

Print view View original

1–3 of 3 posts

Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft

#1

Post by georgek1029 » Fri, Feb 01, 2013, 6:44 PM UTC

Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft
labs.bitdefender.com

Re: Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft

#2

Post by [deleted] » Fri, Feb 01, 2013, 7:28 PM UTC

[deleted]

Re: Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft

#3

Post by caseyf » Fri, Feb 01, 2013, 8:22 PM UTC

Yikes. Any site with a publicly accessible swfupload.swf is open to XSS.

https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-appl...

Post reply on HN