Lucene search
+L

61 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/27 12:00 a.m.•3 views

CVE-2007-4039: Improper Neutralization of Input During Web Page Generation

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handli...

4.3CVSS6.3AI score0.02014EPSS
SaveExploits0References3
Prion
Prion
•added 2007/07/24 5:30 p.m.•29 views

Cross site scripting

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are...

4.3CVSS8.6AI score0.29355EPSS
SaveExploits4References2
NVD
NVD
•added 2007/07/24 5:30 p.m.•33 views

CVE-2007-3954

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are...

4.3CVSS7.2AI score0.06673EPSS
SaveExploits0References2
CVE
CVE
•added 2007/07/24 5:00 p.m.•80 views

CVE-2007-3954

Technical details for CVE-2007-3954 are not publicly available in the provided connected documents. The materials do not specify affected products, versions, impact, exploit status, or remediation. Monitor for updates and rely on official advisories for precise information.

4.3CVSS8AI score0.06673EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/24 12:00 a.m.•5 views

CVE-2007-3954: Improper Neutralization of Input During Web Page Generation

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are...

4.3CVSS6.3AI score0.06673EPSS
SaveExploits0References2
Prion
Prion
•added 2007/07/21 12:30 a.m.•35 views

Cross site scripting

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the...

9.3CVSS8.6AI score0.29355EPSS
SaveExploits4References2Affected Software1
NVD
NVD
•added 2007/07/21 12:30 a.m.•38 views

CVE-2007-3924

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the...

9.3CVSS7.1AI score0.13631EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/21 12:00 a.m.•3 views

CVE-2007-3924: Undefined Security Weakness

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the...

9.3CVSS6.2AI score0.13631EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2007/07/21 12:00 a.m.•43 views

CVE-2007-3924

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the...

9.2AI score0.13631EPSS
SaveExploits0References2
CVE
CVE
•added 2007/07/21 12:00 a.m.•76 views

CVE-2007-3924

CVE-2007-3924 describes an argument-injection vulnerability in Internet Explorer when Netscape is installed and certain URIs are registered. The issue arises from IE not properly delimiting the URL argument when invoking Netscape, allowing remote attackers to perform cross-browser scripting and e...

9.3CVSS8AI score0.13631EPSS
SaveExploits0References2Affected Software2
myhack58
myhack58
•added 2007/07/12 12:00 a.m.•27 views

firefox break 0day high-risk vulnerabilities: Cross Browser Scripting-vulnerability warning-the black bar safety net

firefox break high-risk vulnerabilities, perform local program. At the same time using IE and firefox users, please note that bug fixes it! Monyer published temporary workaround: put the following code into the Run box, run, or saved as. bat double-click to run, or in cmd run: reg delete...

7.6AI score
SaveExploits0
NVD
NVD
•added 2007/07/10 7:30 p.m.•25 views

CVE-2007-3670

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a 1 FirefoxURL or 2 FirefoxHTM...

4.3CVSS7AI score0.29355EPSS
SaveExploits4References39
UbuntuCve
UbuntuCve
•added 2007/07/10 7:30 p.m.•28 views

CVE-2007-3670

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a 1 FirefoxURL or 2 FirefoxHTM...

4.3CVSS7.1AI score0.29355EPSS
SaveExploits4References2
Prion
Prion
•added 2007/07/10 7:30 p.m.•24 views

Cross site scripting

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a 1 FirefoxURL or 2 FirefoxHTM...

4.3CVSS8.4AI score0.29355EPSS
SaveExploits4References39Affected Software1
Cvelist
Cvelist
•added 2007/07/10 7:00 p.m.•50 views

CVE-2007-3670

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a 1 FirefoxURL or 2 FirefoxHTM...

9AI score0.29355EPSS
SaveExploits4References39
CVE
CVE
•added 2007/07/10 7:00 p.m.•216 views

CVE-2007-3670

CVE-2007-3670 describes an argument-injection vulnerability where Internet Explorer could pass malicious parameters to registered Firefox handlers (FirefoxURL/FirefoxHTML) on Windows, enabling cross-browser scripting and potential remote code execution by exploiting the unescaped URL argument whe...

4.3CVSS8.3AI score0.29355EPSS
SaveExploits4References39Affected Software2
exploitpack
exploitpack
•added 2007/07/10 12:00 a.m.•15 views

Microsoft Internet Explorer and Mozilla Firefox - URI Handler Command Injection

Microsoft Internet Explorer and Mozilla Firefox - URI Handler Command Injection source: https://www.securityfocus.com/bid/24837/info Microsoft Internet Explorer, Mozilla Firefox and Netscape Navigator are prone to a vulnerability that lets attackers inject commands through the 'firefoxurl' and...

0.2AI score
SaveExploits0
Symantec
Symantec
•added 2007/07/10 12:00 a.m.•24 views

Microsoft Internet Explorer and Mozilla Firefox URI Handler Command Injection Vulnerability

Description Microsoft Internet Explorer, Mozilla Firefox and Netscape Navigator are prone to a vulnerability that lets attackers inject commands through the 'firefoxurl' and 'navigatorurl' protocol handlers. Exploiting these issues allows remote attackers to pass and execute arbitrary commands an...

0.5AI score
SaveExploits0References12Affected Software24
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/10 12:00 a.m.•2 views

CVE-2007-3670: Improper Neutralization of Input During Web Page Generation

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a 1 FirefoxURL or 2 FirefoxHTM...

4.3CVSS6.2AI score0.29355EPSS
SaveExploits4References2
Exploit DB
Exploit DB
•added 2007/07/10 12:00 a.m.•32 views

Microsoft Internet Explorer and Mozilla Firefox - URI Handler Command Injection

source: https://www.securityfocus.com/bid/24837/info Microsoft Internet Explorer, Mozilla Firefox and Netscape Navigator are prone to a vulnerability that lets attackers inject commands through the 'firefoxurl' and 'navigatorurl' protocol handlers. Exploiting these issues allows remote attackers ...

4.3CVSS7.1AI score0.29355EPSS
SaveExploits4
Rows per page
Query Builder