CVE-2011-4457

OWASP Java HTML Sanitizer (owasp-java-html-sanitizer) before version 88 is affected: when JavaScript is disabled, a crafted FORM element within a NOSCRIPT element can lead to information exposure by user-assisted remote interaction. The issue is fixed in r88; users should upgrade to that release....

CVE-2011-4457

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

CVE-2011-4457: Exposure of Sensitive Information to an Unauthorized Actor

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

PT-2011-4956

Name of the Vulnerable Software and Affected Versions OWASP HTML Sanitizer versions prior to 88 Description The issue allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element when JavaScript is disabled. Recommendations...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

DEBIAN-CVE-2008-5647

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...

CVE-2008-5647

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...

PYSEC-2008-7

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...

CVE-2008-5647

CVE-2008-5647 affects Trac prior to 0.11.2, due to an unspecified vulnerability in the HTML sanitizer filter that enables phishing attacks via unknown vectors. The description provides no explicit exploit details or available fixes; no remediation version is stated in the supplied documents.

CVE-2008-5647

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...

CVE-2008-5647: Undefined Security Weakness

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors...

CVE-2026-45066: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification

More info at https://symfony.com/cve-2026-45066...

CVE-2026-48761: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content

More info at https://symfony.com/cve-2026-48761...

CVE-2026-48761: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content

More info at https://symfony.com/cve-2026-48761...