CVE-2008-1133

The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting XSS attacks...

SA-2008-018 - Drupal core - Cross site scripting

Titles are not escaped prior to being displayed on content edit forms, allowing users to inject arbitrary HTML and script code into these pages. The Drupal.checkPlain function, used to escape text in ECMAScript, contains a bug which causes it to escape only the first instance of a character,...

Microsoft IE ECMAScript解释器栈溢出漏洞

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft IE处理畸形HTML页面时存在问题，如果IE用户受骗访问了恶意的WEB页面的话，就会触发ECMAScript解释器中的栈溢出漏洞，IE显示“unknown software exception”错误并关闭。 Microsoft Internet Explorer 6.0.2900.2180 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp...