Hacker News Reader

They mention the example of browsing to a web page. Not quite a fully fledged remote execution bug but close enough. I think what they're really saying is they're aware of remote execution cases. An example of that might be a web services that's backed by a SQLite query.

View on HN

Drive-by code execution from a page in a web browser is almost the textbook example of "RCE" in its modern sense.

Yeah, of the browser or plugin. SQLite is neither although does have a local exploit.

JavaScript code has access to SQLite. So any webpage where the attacker controls/can inject JavaScript is vulnerable.

Firefox has never supported WebSQL...

Reply on news.ycombinator.com