[Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
pdp (architect)
pdp.gnucitizen at googlemail.com
Wed Jan 3 10:27:26 GMT 2007
no worries, the vulnerability details presented on my blog post were
updated. good work.
On 1/3/07, sven.vetsch at disenchant.ch <sven.vetsch at disenchant.ch> wrote:
> Quoting "pdp (architect)" <pdp.gnucitizen at googlemail.com>:
>
> > This finding was originally mentioned by Sven Vetsch, on his blog.
> > This is a very good and quite interesting. Good work.
>
> Sorry about that but that's wrong. All the credits have to go to Stefano Di
> Paola and Giorgio Fedon. They presented that stuff at the 23C3 in Berlin. The
> only thing that I did was an overview and I found out, that it doesn't matter
> how the parameter is called. I "just" forgot to copy paste the credits from my
> original document, to the blog entry. I'm very sorry about that and of course I
> putted it in my entry now.
>
> Regards,
> Disenchant / Sven Vetsch
>
>
>
--
pdp (architect) | petko d. petkov
http://www.gnucitizen.org
Full-Disclosure is hosted and sponsored by Secunia.