Opera 9.60 - Persistent Cross-Site Scripting

Opera 9.60 - Persistent Cross-Site Scripting ======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October...

Opera <= 9.60 Stored Cross Site Scripting Vulnerability

Exploit for unknown platform in category remote exploits ======================================================= Opera = 9.60 Stored Cross Site Scripting Vulnerability ======================================================= ======================================================================= =...

Opera 9.60 - Persistent Cross-Site Scripting

======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...

Opera < 9.61 Multiple Vulnerabilities

Binary data 4715.prm...

Opera < 9.61 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.61 and thus reportedly affected by several issues : - It may be possible to reveal a user's browsing history by exploiting certain constructs in Opera's History Search results 903. - Opera's Fast Forward feature is affected by a...

opera -- multiple vulnerabilities

Opera reports: Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...

Restrict access to page history to certain users (or groups)

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-13247. panel A customer requested for a new feature to restrict access to page history only to a particular group or certain use...

Restrict access to page history to certain users (or groups)

A customer requested for a new feature to restrict access to page history only to a particular group or certain users...

SuSE 10 Security Update : Subversion (ZYPP Patch Number 5362)

This update of subversion fixes multiple vulnerabilities. - list CVS or SVN commits on 'all-forbidden' files. CVE-2008-1290 - directly access hidden CVSROOT folders. CVE-2008-1291 - expose restricted content via the revision view, the log history, or the diff view. CVE-2008-1292 %NASLMINLEVEL 703...

Input validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

Adobe Flex 3历史管理'historyFrame.html'跨站脚本漏洞

BUGTRAQ ID: 29778 CVE ID：CVE-2008-2640 CNCVE ID：CNCVE-20082640 Adobe Flex 3是一款开发富网络应用的工具。 Adobe Flex 3历史管理功能存在跨站脚本问题，远程攻击者可以利用漏洞获得敏感信息。 Adobe Flex 3历史管理功能存在输入验证错误，historyFrame.html脚本对用户提交的参数缺少过滤，提交恶意脚本代码，并诱使用户访问，可导致获得目标用户敏感信息。 Adobe Flex SDK 3.0.1 Adobe Flex Builder 3 Adobe Flex 3.0 升级程序： Adobe...

Adobe Flex 3历史管理historyFrame.html跨站脚本漏洞

BUGTRAQ ID: 29778 CVECAN ID: CVE-2008-2640 Adobe Flex 3是用于构建和维护Web应用程序的高效开放源码框架。 Flex 3的历史管理功能所使用的historyFrame.html页面没有正确地过滤某些用户输入便返回给了用户，这允许远程攻击者通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 0 Adobe Flex Builder 3 Adobe Flex 3.0.1 SDK Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a...

Adobe Flex 3 History Management historyFrame.html XSS

The remote host contains one or more HTML documents associated with Adobe Flex 3's History Management Feature and affected by a DOM-based cross-site scripting vulnerability. Due to its failure to sanitize user input, an attacker may be able to leverage this issue to inject arbitrary HTML and scri...

Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history

Overview Sleipnir and Grani, web browsers from Fenrir & Co., contain a vulnerability in the bookmark search function that allows an attacker to execute an arbitrary script when search results are restored from history. Sleipnir and Grani, web browsers from Fenrir & Co., have a bookmark search...

Cross site scripting

Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...

CVE-2008-2567

Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...

CVE-2008-2567

Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...

MS Internet Explorer URL Injection in History List (MS04-004)

No description provided by source. // Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Miniweb 2.0 historymonth Remote SQL Injection Vulnerability ============================================================= Rem0te SQL Injection Vulnerability Miniweb 2.0 index.ph...