CVE-2006-6985

CVE-2006-6985 affects Maxthon 1.5.6 build 42. a cross-domain information disclosure via an object tag with a data parameter referencing a link on an attacker site, which specifies a Location header pointing to the target site and exposes content through the object’s outerHTML. The root cause is c...