288 matches found
Microsoft Internet Information Server (IIS) contains cross-site scripting vulnerability in IIS Help Files search facility
Overview Visitors to web sites that use Microsoft IIS 5.0 and 5.1 are vulnerable to cross-site scripting attacks through the IIS help facility. Description Cross-site scripting is a form of attack in which an intruder leverages the trust between a victim and a web-site the victim trusts. Quoting...
CVE-1999-1531
CVE-1999-1531 documents a buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J triggered by a long IMG_SRC HTML tag, allowing a malicious Web site to execute arbitrary code on a viewer’s system. The vulnerability affects the viewer’s environment via HTML rendering input, with a network-based...
CVE-2001-0835
Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in 1 search keywords embedded in HTTP referrer information, or 2 host names that are retrieved via a reverse DNS lookup...
Aladdin Knowledge Systems eSafe Gateway 3.0 - HTML tag Script-filtering Bypass
source: https://www.securityfocus.com/bid/2800/info eSafe Gateway is a security utility used for filtering internet content. It is possible to craft an html file that slips through eSafe Gateway's script filtering feature. eSafe Gateway will ignore scripting commands that are embedded in any html...
Aladdin Knowledge Systems eSafe Gateway 3.0 - HTML tag Script-filtering Bypass
Aladdin Knowledge Systems eSafe Gateway 3.0 - HTML tag Script-filtering Bypass source: https://www.securityfocus.com/bid/2800/info eSafe Gateway is a security utility used for filtering internet content. It is possible to craft an html file that slips through eSafe Gateway's script filtering...
CVE-2000-1172
CVE-2000-1172 affects Gaim (formerly a...); specifically version 0.10.3 and earlier using the OSCAR protocol. The issue is a buffer overflow triggered by a long HTML tag in received messages, leading to remote denial of service and potentially arbitrary code execution. Exploitation details are no...
