Tim Brown has discovered a vulnerability in rekonq, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerability is caused due to the application not properly sanitising the URL displayed via the error page. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an arbitrary site if the domain cannot be resolved.

The vulnerability is confirmed in version 0.3.90. Other versions may also be affected.

Solution
Fixed in the GIT repository.
Further details available to Secunia VIM customers

Provided and/or discovered by
Tim Brown, Nth Dimension

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0212.html
https://bugs.kde.org/show_bug.cgi?id=217464
http://gitorious.org/rekonq/mainline/commit/1fd48c700abb6d7ff56fded1e39a1418cc573216

Deep Links
Links available to Secunia VIM customers