WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure

Author: Aaron Sigel
type: remote
platform: windows
port: 
date_added: 2011-03-09 
date_updated: 2014-12-03 
verified: 1 
codes: CVE-2011-0167;OSVDB-73773 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/46816/info

WebKit is prone to a cross-domain scripting vulnerability because it fails to properly enforce the same-origin policy.

Successfully exploiting this issue will allow attackers to send the content of arbitrary files from the user's system to a remote server controlled by them. This results in disclosure of potentially sensitive information which may aid in further attacks.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35434.zip