Froogle/Gmail security hole

[Maizoon]

By embedding JavaScript in a URL pointing to Froogle, a hacker can gain access to the user’s Gmail account. The JavaScript redirects the browser to a malicious web site, where the hacker can read the user’s cookie, which contains personal information, such as purchase history, user name and password for Google services.

http://www.aviransplace.com/index.php/archives/2005/01/13/serious-flaw-in-froogle-reveals-gmail-accounts/

http://net.nana.co.il/Article/?ArticleID=155025&sid=10

Gmail accounts 'wide open to exploit' - report