CVE-2009-2350

Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header or 2 specifying the content of a Refresh header...

CVE-2009-2350

Technical details about CVE-2009-2350 are not provided in the connected documents; available content only notes that Internet Explorer 6 and earlier are vulnerable to javascript: Refresh header XSS. Monitor for updates.

CVE-2009-2350

creationtimestamp| type| source ---|---|--- 2009-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33063...