Microsoft Internet Explorer Persistent Window Content Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to address-bar spoofing. Attackers may exploit this via a malicious web page to spoof the contents of a page that the victim may trust. This vulnerability may be useful in phishing or other attacks that rely on content spoofing. Technologies Affect...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

Design/Logic Flaw

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

Code injection

Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is sti...

CVE-2006-1626

CVE-2006-1626 is the Address Bar Spoofing vulnerability in Internet Explorer 6 for Windows XP SP2 and earlier, enabling remote spoofing of the address bar by re-opening a window to a malicious plugin (e.g., Shockwave Flash) while loading, then navigating back to a trusted URL. Connected docs show...

CVE-2006-1626

Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is sti...

Microsoft Internet Explorer 5 - Address Bar Spoofing

Microsoft Internet Explorer 5 - Address Bar Spoofing source: https://www.securityfocus.com/bid/17404/info Internet Explorer is prone to address-bar spoofing. An attacker can exploit this issue to display the URI of a trusted and known site in the address bar, while running an attacker-supplied...

Microsoft Internet Explorer 5 - Address Bar Spoofing

source: https://www.securityfocus.com/bid/17404/info Internet Explorer is prone to address-bar spoofing. An attacker can exploit this issue to display the URI of a trusted and known site in the address bar, while running an attacker-supplied Macromedia Flash application. This may aid in...

Bypass the invitation to join the Windows Live™ Mail-vulnerability warning-the black bar safety net

First, log into your MSN or HOTMAIL modify personal information Language - English Country - United States State - Florida. 2. Put the following address copy into your browser, just IE address bar, enter. http://by101fd.bay101.hotmail.msn.com/cgi-bin/BetaOptIn?page=option&curmbox=0 0 0 0 0 0 0...

www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net

1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...

CVE-2005-4301

Cross-site scripting XSS vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field...

CVE-2005-4301

Cross-site scripting XSS vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field...

Opera web browser address bar spoofing weakness

The remote host is using Opera - an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. This is reportedly possible through malicious use of the JavaScript SPDX-FileCopyrightText: 2004 David...

Opera web browser address bar spoofing weakness (2)

The remote host contains a web browser that is vulnerable to address bar spoofing attacks. Description : The remote host is using Opera, an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It ...

Opera web browser address bar spoofing weakness (2)

The remote host contains a web browser that is vulnerable to address bar spoofing attacks. Description : The remote host is using Opera, an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It ...

CVE-2004-2491

A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks...

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks...

CVE-2004-2260

Opera Browser 7.23 and other versions before 7.50 are affected by an address-bar spoofing weakness. The root cause is a JavaScript-based onUnload/unOnload handling during page redirects, which can cause the address bar to display a spoofed domain and mislead users. This vulnerability could enable...

CVE-2004-2260

Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute...