[SECURITY] [DSA 1120-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1120-1 [email protected] http://www.debian.org/security/ Martin Schulze July 23rd, 2006 http://www.debian.org/security/faq -...

CVE-2006-2784

CVE-2006-2784 affects Mozilla Firefox’s PLUGINS PAGE prior to 1.5.0.4. An attacker-supplied prompt could trick a user into installing a missing plugin and clicking Manual Install, then chain nested javascript: URLs to run privileged code. The documented impact is remote user-assisted code executi...

CVE-2005-2784

CVE-2005-2784 affects cosmoshop 8.10.78, where the login function of the administration panel is vulnerable to SQL injection. The underlying issue allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors. The NVD entry notes a high impact (base s...