Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector.
docs.info.apple.com/article.html?artnum=307563
lists.apple.com/archives/security-announce/2008/Mar/msg00000.html
secunia.com/advisories/29393
www.securityfocus.com/bid/28290
www.securityfocus.com/bid/28347
www.securitytracker.com/id?1019653
www.us-cert.gov/cas/techalerts/TA08-079A.html
www.vupen.com/english/advisories/2008/0920/references
exchange.xforce.ibmcloud.com/vulnerabilities/41331