EDB-45867

PoC

Webkit (Chome < 61) - 'MHTML' Universal Cross-site Scripting

view exploit source exploit_dbtype localauthor Anton Lopanitsynpublished 2017-10-03catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-5124USmedium6.1Exploit
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan