Lucene search
K

msie.5.previous.inputs.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 29 Views

Security risk in Internet Explorer 5 where form autocomplete exposes sensitive information.

Code
`Date: Wed, 24 Mar 1999 16:04:00 -0500  
From: Anthony Pijerov <[email protected]>  
To: [email protected]  
Subject: IE5 Feature/security hole  
  
In Internet Explorer 5, there is a feature, that remembers what you type  
into web page forms, so that if you ever come to enter that field again,  
it will drop down a box of your previous inputs.  
(Note, the first time you come to a form, it will ask you wether or not  
you want to enable this function, and you can say no)  
  
Good feature? Perhaps, it could be time saving, when say, having to type  
in your name on a form everytime.  
  
Security Hole? Yes. Credit Card Numbers, social security numbers,  
usernames, addresses. It will drop down a box with previous entered data.  
So if you say have a web site were you order stuff online, or entered some  
sort of data to verify yourself, the next person to use your computer can  
go to that same site, and have a nice list of what you typed. At a home  
computer the risk is limited to who you let use your computer, but at  
things like schools, or other areas where many people share the same  
computer, this could become a security/privacy problem. I verified it  
does work with Credit Card numbers on secure sites. I tested on CDNow and  
amazon.com (pretty popular sites to enter CC info).  
  
  
I think this feature is one that everyone needs to know to make sure is  
OFF.  
  
---------------------------------------------------------------------------  
Anthony Pijerov Customer Support: 452-1465  
[email protected] or 1-888-223-INET  
Customer Support Rep. http://www.global2000.net  
----------------------------------------------------------------------------  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation