131 matches found
Maxthon 'javascript:' And 'data:' URI XSS Vulnerability
Maxthon Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Maxthon Version Detection
This script detects the installed version of Maxthon Browser. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-3018
Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...
Cross site scripting
Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...
CVE-2009-3018
Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...
CVE-2009-3018
CVE-2009-3018 (Maxthon Browser 3.0.0.145 Alpha in Ultramode) is described in the initial record as an XSS flaw where javascript: and data: URIs are not properly blocked in Refresh headers, and where data: URIs in Location headers or javascript: data URIs in HTML links on 301/302 error documents c...
CVE-2009-3018: Improper Neutralization of Input During Web Page Generation
Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...
Design/Logic Flaw
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...
CVE-2009-3006
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...
CVE-2009-3006
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...
CVE-2009-3006
The CVE-2009-3006 entry concerns Maxthon Browser 2.5.3.80 UNICODE. The vulnerability allows a remote attacker to spoof the address bar by using window.open with a relative URI, causing the browser to display an arbitrary URL on the site visited by the victim and potentially trigger a spoofed logi...
CVE-2009-3006: Undefined Security Weakness
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...
Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC
No description provided by source. !-- Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC Summary: Maxthon Browser is a powerful tabbed browser built for all users. Besides basic browsing functionality, Maxthon Browser provides a rich set of features to improve your surfing experience...
Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC
Exploit for unknown platform in category dos / poc ============================================================== Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC ============================================================== Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Servic...
Maxthon Browser 2.1.4.443 - Unicode Remote Denial of Service (PoC)
Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC alert"Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC\n\n\t\tby LiquidWorm"; function thricer title="Attack"; url="http://www.thrice.net/"; if window.sidebar window.sidebar.addPaneltitle, url,""; else if window.external...
Maxthon Browser 2.1.4.443 - Unicode Remote Denial of Service (PoC)
Maxthon Browser 2.1.4.443 - Unicode Remote Denial of Service PoC Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC alert"Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC\n\n\t\tby LiquidWorm"; function thricer title="Attack"; url="http://www.thrice.net/"; if...
Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC
Summary Maxthon Browser is a powerful tabbed browser built for all users. Besides basic browsing functionality, Maxthon Browser provides a rich set of features to improve your surfing experience. Description Maxthon Browser is prone to a denial-of-service vulnerability. An attacker may exploit th...
maxthon-dos.txt
Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC alert"Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC\n\n\t\tby LiquidWorm"; function thricer title="Attack"; url="http://www.thrice.net/"; if window.sidebar window.sidebar.addPaneltitle, url,""; else if window.external...