There's reports of a gmail xss in the wild that will steal someone's contact list and email if they website is visited while being logged in to gmail.<br><br><a href="http://cyber-knowledge.net/blog/2007/01/01/gmail-vulnerable-to-contact-list-hijacking/">
http://cyber-knowledge.net/blog/2007/01/01/gmail-vulnerable-to-contact-list-hijacking/</a><br><br>I can't find this on Bugtraq or any release. Anyone have any more info or a PoC?<br><br>Thanks, Denzity.<br>