CVE-2007-6308

CVE-2007-6308 affects Klab HttpLogger 0.8.1, described as a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling arbitrary script execution in the user’s browser. The associated documents identify Http...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows is affected. Local users can potentially gain privileges by stopping the shstart.exe process and selecting Web Self-Service from the system tray, which opens a browser window running with elevated privileges. The root cause is the browser window inheriting...