[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Yahoo Messenger Crash Tested

It seems that any number of alternative strings will work as well:
"msg:_________________________________________iframe onload=$InlineAction()>:)" without quotes works as well.

[, -, ^, {, [alt-0160]'s all seem to work as well

Is there a cross scripting vulnerability as well?  Inserting script commands brings up an odd Script Error screen and a file name.