0
POPSTopSurfer TopSurfer is one of the best Traffic Ehchanges about Check it out now. http://topsurfer.com/newuser.cgi?referer=deehomepage
0
POPSCross-Site Request Forgery (CSRF or XSRF) Related to the Firefox / SeaMonkey vulnerability noted in the previous clip. Please see source for excellent examples on how this is done. The Digg example is not well written, but explains well how this is accomplished.
0
POPSFirefox / Seamonkey HTTP Referer Vulnerability This issue relates to Cross-site Request Forgeries. One countermeasure is for the authenticating web site to check the HTTP Referer header to ensure the request is coming from an authorized site. This vulnerability permitted an attacker to delay the loading of the attack script until the intended (permitted) referring page was loaded, which would circumvent HTTP Referer checks to prevent CSRF. Solution: Update to Firefox 2.0.0.10 and latest version of SeaMonkey. See next post for explanation of CSRS (aka XSRF)