Cross-site Scripting (XSS)

invenio-communities is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of community.description in about.html...

Juniper Netscreen information leak

/about.html page shows device version information...

CVE-2004-2475

Cross-site scripting XSS vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it i...

CVE-2004-2475: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it i...

CVE-2005-0540: Undefined Security Weakness

Cyclades AlterPath Manager APM Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page...

Google Toolbar 1.1.x - About.HTML HTML Injection

source: https://www.securityfocus.com/bid/11210/info Google Toolbar is reported prone to a HTML injection vulnerability. It is reported that the Google Toolbar 'ABOUT.HTML' page allows the injection of HTML and JavaScript code. This vulnerability may allow an attacker to inject malicious HTML and...