BLOG
More on the Yahoo exploit
Exacttarget’s Carlo Catajan talks about the Yahoo exploit. My own mailbox seems to indicate this hole is closed.
Exacttarget’s Carlo Catajan talks about the Yahoo exploit. My own mailbox seems to indicate this hole is closed.
There seems to be some doubt that it is entirely closed.
http://www.offensive-security.com/offsec/yahoo-dom-xss-0day-prevails/