KDE Security Advisory: Konqueror Cross-Domain Cookie Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Konqueror Cross-Domain Cookie Injection Original Release Date: 2004-08-23 URL: http://www.kde.org/info/security/advisory-20040823-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0746 1. Systems affecte...

[ GLSA 200408-23 ] kdelibs: Cross-domain cookie injection vulnerability

Gentoo Linux Security Advisory GLSA 200408-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

kdelibs: Cross-domain cookie injection vulnerability

Background KDE is a widely-used desktop environment based on the Qt toolkit. kcookiejar in kdelibs is responsible for storing and managing HTTP cookies. Konqueror uses kcookiejar for storing and managing cookies. Description kcookiejar contains a vulnerability which may allow a malicious website ...

kdelibs -- konqueror cross-domain cookie injection

According to a KDE Security Advisory: WESTPOINT internet reconnaissance services alerted the KDE security team that the KDE web browser Konqueror allows websites to set cookies for certain country specific secondary top level domains. Web sites operating under the affected domains can set HTTP...

CVE-2003-0770

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement...

Philboard Forum Vulnerability

Philboard Vulnerability Severity : High Possible gain administrator/users access on Forum Board Systems Affected: Philboard up to v1.14 Vendor URL: http://www.youngpip.com/philboard.asp Vuln Type : Cookie Injection Status : Vendor contacted, fixed version is not available cause they didn't respon...

CVE-2002-2056

Cross-site scripting XSS vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the validusernameonline cookie...

[img]-vulnerability in vBulletin Version 2.2.2 & 2.2.1 & maybe olders

Hi I've discovered a vulnerability in the vBulletins's img-Tag implementation, that allows users to inject vbs-code in posts and private messages img is switched on by default. Through that, an attacker is able to steal other users cookies and maybe hijack their accounts. The following code sends...