[Owasp-delhi] Orkut Signout via scrap
skg102 at gmail.com
Sat Jun 12 13:26:41 EDT 2010
There is a small bug in orkut scrapbook that if any one sends a scrp
containing the following code
style="" id="979482838" name="979482838" bgcolor="#FFFFFF"
quality="autohigh" wmode="transparent" allownetworking="internal"
allowscriptaccess="never" height="1" width="1">
Then the recipient will logout automatically from the orkut.
Same thing occurred to me while I was browsing and mail was sent to me
from my friend Nikhil and In case same thing occurs with you then you
should try to delete that scrap on next login and In case you are
unable to do that then you can simply disable flash then you will be
able to delete that scrap.
It's all about Hacking and Security
More information about the Owasp-delhi