Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it is not allowed in the Internet Zone. Thus this might not be a vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google工具栏'About'跨站脚本执行漏洞
Vulnerability Description
GoogleToolbar是集成于IE的工具条，方便用户搜索。 GoogleToolbar存在一个输入验证问题，远程攻击者可以利用这个漏洞进行跨站脚本攻击，获得用户敏感信息。 工具栏的'About'段不正确过滤HTML代码，用户可以建立一HTML，当被目标用户装载时，会调用'About'页面，在页面上下问执行任意脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A