Collected research
There's an OAK TREE in my blog!?!?!
Billy (BK) Rios » There’s an OAK TREE in my blog!?!?!
Google Docs' publish-to-your-blog feature POSTs to /MiscCommands with a docID the server never checked against the caller. Swapping in another document's docID made Google send that document to the attacker's own WordPress blog; Rios demonstrates it on Google's Oak Tree View demo doc. Google fixed it and raised DocID entropy.
Record
- Document
- Billy (BK) Rios » There’s an OAK TREE in my blog!?!?!
- Researcher
- Billy Rios
- Published by
- xs-sniper.com
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Billy Rios, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .