Practical Example of csSQLi Using (Google) Gears Via XSS
For those interested, a blog posting detailing the attack outlined in the article is available at:
http://research.zscaler.com/2009/02/practical-example-of-cssqli-using.html
--
Michael Sutton
VP, Security Research
Zscaler