Arbitrary Script Execution Vulnerability in Yahoo! Messenger 5,0,0,1064 and Earlier

CVE-2002-0032

Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.

Learn more about our User Device Pen Test.