CVE-2007-1878

CVE-2007-1878 describes a Cross-zone scripting weakness in the DOM templates (domplates) used by Firebug’s console.log in Firefox, allowing remote execution by bypassing zone restrictions and reading file:// URIs via the runFile path, due to lack of HTML escaping in the property name. It affects ...

CVE-2006-1878

CVE-2006-1878 affects phpFaber TopSites: a cross-site scripting (XSS) vulnerability in index.php, exploitable via the page parameter to inject arbitrary web script or HTML. The provided sources describe the vulnerability but do not specify affected product versions, exact root cause beyond unsani...

CVE-2005-1878

The CVE-2005-1878 entry concerns GIPTables Firewall 1.1 and earlier. It describes a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack on the temp.ip.addresses file. The impact is partial confidentiality/integrity compromise via local access. No explicit reme...

CVE-2004-1878

LINBOX LIN:BOX is affected by CVE-2004-1878, where remote attackers can bypass authentication and access sensitive information by sending a direct request to admin/user.pl with a double leading slash (//). The NVD entry indicates a NETWORK attack vector, low complexity, no authentication required...

CVE-2004-1878

LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // double leading slash...