CVE-2009-3005

Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containi...

CVE-2009-3003

CVE-2009-3003 affects Microsoft Internet Explorer 6–8. The vulnerability arises when a page opens a relative URI via window.open, allowing an attacker to spoof the address bar and display an arbitrary URL on the site visited by the victim, potentially triggering a spoofed login form for that site...

CVE-2009-3007

CVE-2009-3007 affects Mozilla Firefox 3.5.1, SeaMonkey 1.1.17, and Flock 2.5.1, enabling context-dependent attackers to spoof the address bar via window.open with a relative URI to reveal an arbitrary file: URL after the user navigates to a file: URL. The connected documents corroborate a family ...

CVE-2009-3008

The provided connected documents corroborate CVE-2009-3008 affecting K-Meleon 1.5.3, describing an address bar spoofing vulnerability. Attackers can cause the browser to display an arbitrary file: URL in the address bar by using window.open with a relative URI after the user has visited a file: U...

CVE-2009-3006

The CVE-2009-3006 entry concerns Maxthon Browser 2.5.3.80 UNICODE. The vulnerability allows a remote attacker to spoof the address bar by using window.open with a relative URI, causing the browser to display an arbitrary URL on the site visited by the victim and potentially trigger a spoofed logi...

CVE-2009-3004

Summary : CVE-2009-3004 affects Avant Browser (version 11.7, builds 35 and 36) and enables address-bar spoofing through window.open with a relative URI, allowing an attacker-controlled page to load an arbitrary URL and trigger a spoofed login form. This is supported by multiple sources in connect...

CVE-2009-3005

Lunascape Browser versions 5.1.3 and 5.1.4 are affected by an address bar spoofing vulnerability. An attacker can cause a spoofed URL to appear via window.open with a relative URI, leading to a spoofed login form on the site visited by the victim. Related reports mention an arbitrary file: URL va...

CVE-2009-3008

K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker...

CVE-2009-3003

Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the...

CVE-2009-3003: Undefined Security Weakness

Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the...

Discuz! Plugin Crazy Star < = 2.0 Sql injection Vulnerability-vulnerability warning-the black bar safety net

========================Author============================ + Founded : ZhaoHuAn + Contact : ZhengXingatshandagamesdotcom + Blog : http://www.patching.net/zhaohuan/ + Date : August, 26th 2 0 0 9 Double Seventh Festival ========================Soft Info========================= Software: Discuz!...

Practical analysis once the WinRoute Backdoor offensive and defensive live-vulnerability warning-the black bar safety net

The school through the Windows 2 0 0 0 and the winroute proxy way to access the Internet. These two days, the proxy server always appears some strange phenomenon, running the program seems to be very slow, but it will also automatically restart. Could it be a virus? Or in a Trojan. Anyway, go and...

CVE-2009-3007: Undefined Security Weakness

Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the...

CVE-2009-3004: Undefined Security Weakness

Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the sit...

CVE-2009-3005: Undefined Security Weakness

Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containi...

CVE-2009-3006: Undefined Security Weakness

Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...

CVE-2009-3008: Undefined Security Weakness

K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker...

CVE-2008-7121: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar...

Php168 v6 privilege elevation vulnerability-vulnerability warning-the black bar safety net

| by Ryat http://www.hackgood.com Every day at work,I haven't post on the forum... Previously issued a php168 v2008 privilege elevation vulnerability,this vulnerability is also shown in the same code segment Directly gives the exp,inside some details or some mean,interested students can...

Discuz custom template variable vulnerability-vulnerability warning-the black bar safety net

Variables : ',";ECHO ";$X=SUBSTRMD5$GET'B',2 8;IF$X=='7aaa' and$POST'A';// Replace the contents : aaaaaaaaaa Then the link The post variable b is md5 encrypted, if the first 2 8-3 1 bit is 7aaa then execute$POST'a'; Use the DZ Forum of classmates please self-check/forumdata/cache/file under...