CVE-2009-1413

Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context o...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

Design/Logic Flaw

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service application crash via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location...

CVE-2007-3274: Undefined Security Weakness

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service application crash via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location...

CVE-2007-1256: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

XSS flaw in MG2 Image Gallery (v.0.5.1)

Users can inject XSS into the form field "Name", when adding a comment on a picture. This will lead to the execution of XSS code. Simple scripting like scriptalert'hello'/script , and more advanced document.location, and document.cookie works. This has been tested on version 0.5.1. Other versions...