Description
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
References
- CA-2002-16 third-party-advisory
- 20020527 Yahoo Messenger - Multiple Vulnerabilities mailing-list
- 4838 vdb-entry
- VU#172315 third-party-advisory
- yahoo-messenger-script-injection(9184) vdb-entry