Lucene search
PRIOn knowledge basePRION:CVE-2007-2383HistoryApr 30, 2007 - 11:19 p.m.
Design/Logic Flaw
2007-04-3023:19:00
PRIOn knowledge base
www.prio-n.com
4
The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka “JavaScript Hijacking.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| prototype_framework | eq | 1.5.1-rc3 |
Related
cvelist
cvelist
CVE-2007-2383
2007-04-30 23:00:00
cve
cve
CVE-2007-2383
2007-04-30 23:19:00
nvd
nvd
CVE-2007-2383
2007-04-30 23:19:00
redhatcve
redhatcve
CVE-2007-2383
2019-10-04 20:20:39
debiancve
debiancve
CVE-2007-2383
2007-04-30 23:19:00
ubuntucve
ubuntucve
CVE-2007-2383
2007-04-30 00:00:00
openvas
openvas
Debian Security Advisory DSA 1952-1 (asterisk)
2009-12-30 00:00:00
Debian: Security Advisory (DSA-1952-1)
2009-12-30 00:00:00
debian
debian
[SECURITY] [DSA 1952-1] New asterisk packages fix several vulnerabilities
2009-12-15 13:06:23
osv
osv
asterisk - several vulnerabilities
2009-12-15 00:00:00
nessus
nessus