Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2947

CVE-2008-2947 describes a cross-domain vulnerability in Internet Explorer (IE 5.01 SP4 on Windows 2000 SP4, IE6 SP1 on Windows 2000/XP, IE6/IE7 on various Windows editions, and IE7) where JavaScript can abuse the Window Location object due to incorrect origin determination, leading to remote code...

CVE-2007-2947

Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the rootprefix parameter to 1 index.php, 2 emailsubscribe.php, 3 download.php, or 4 development.php...

CVE-2007-2947

CVE-2007-2947 involves OpenBASE Alpha 0.6 with multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to provide a URL via the root_prefix parameter to one of four scripts (index.php, email_subscribe.php, download.php, or development.php) to cause the system to include re...

CVE-2006-2947

CVE-2006-2947 affects Dmx Forum 2.1a. Remote attackers can obtain usernames/passwords via a direct request to pops/edit.php with a modified membre parameter. CVSS v2 score 5.0 (Medium) — Network, Low complexity, No authentication, Partial confidentiality impact. The provided documents do not incl...

CVE-2005-2947

CVE-2005-2947 describes a buffer overflow in KillProcess version 2.20 and earlier, triggered by an executable file containing a long FileDescription in the version resource. The vulnerability can allow user‑assisted attackers to execute arbitrary code. The provided connected documents do not spec...