Cross site scripting

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

CVE-2009-3015

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

CVE-2009-3015

Removed by vendor...

CVE-2009-3015

QtWeb 3.0 Builds 001 and 003 do not properly block javascript: and data: URIs in Refresh and Location headers, allowing potential XSS via crafted header values (six enumerated vectors). Affected component: HTTP response header handling. Root cause: failure to block dangerous URIs in headers. Expl...

CVE-2009-3015: Improper Neutralization of Input During Web Page Generation

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

QtWeb Browser 2.0 - '.HTML' File Remote Denial of Service

source: https://www.securityfocus.com/bid/34327/info QtWeb browser is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. QtWeb 2.0 is vulnerable; other versions may also be affected...

QtWeb Browser 2.0 - .HTML File Remote Denial of Service

QtWeb Browser 2.0 - .HTML File Remote Denial of Service source: https://www.securityfocus.com/bid/34327/info QtWeb browser is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. QtWeb 2.0 is...

QtWeb Internet Browser 2.0 Denial Of Service

QtWeb Internet Browser 2.0 build 043 Remote Denial of Service Exploit smile Summary: QtWeb is compact, portable and secure web browser having some unique UI and privacy features. QtWeb is an open source project based on Nokia's Qt framework former Trolltech and Apple's WebKit rendering engine the...

QtWeb Internet Browser 2.0 (build 043) Remote Denial of Service Exploit (smile)

Summary QtWeb is compact, portable and secure web browser having some unique UI and privacy features. QtWeb is an open source project based on Nokia's Qt framework former Trolltech and Apple's WebKit rendering engine the same as being used in Apple Safari and Google Chrome. Description QtWeb...