Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability

This host is installed with Orca Browser Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gborcabrowserjsndataurixssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability Authors: Sharath S Copyright:...

Maxthon 'javascript:' And 'data:' URI XSS Vulnerability

Maxthon Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QtWeb 'javascript:' And 'data:' URI XSS Vulnerability

QtWeb Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Product(s) 'javascript:' URI XSS Vulnerability - Sep09 (Linux)

This host is installed with Mozilla Products and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsjsurixssvulnsep09lin.nasl 6482 2017-06-29 08:31:43Z cfischer $ Mozilla Products 'javascript:' URI XSS Vulnerability - Sep09 Linux Authors: Sharath S...

Google Chrome 'javascript: URI' XSS Vulnerability - Sep09

This host is installed with Google Chrome Web Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromejsurixssvulnsep09.nasl 4869 2016-12-29 11:01:45Z teissa $ Google Chrome 'javascript: URI' XSS Vulnerability - Sep09 Authors: Sharath S Copyright:...

Google Chrome 'javascript: URI' XSS Vulnerability (Sep 2009)

Google Chrome Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Safari 'javascript: URI' XSS Vulnerability - Sep09

This host is installed with Apple Safari Web Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafarijsurixssvulnsep09.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari 'javascript: URI' XSS Vulnerability - Sep09 Authors: Sharath S Copyright:...

Apple Safari 'javascript: URI' XSS Vulnerability (Sep 2009)

Apple Safari Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-3016

Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2 entering a javascript: URI...

CVE-2009-3015

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

Cross site scripting

Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains...

CVE-2009-3010

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting ...

CVE-2009-3011

Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains...

CVE-2009-3015

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

CVE-2009-3016

Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2 entering a javascript: URI...

PT-2009-5350 · Mozilla · Firefox +1

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 3.0.13 and earlier Mozilla Firefox version 3.5 Mozilla Firefox version 3.6 a1 pre Mozilla Firefox version 3.7 a1 pre SeaMonkey version 1.1.17 Mozilla versions 1.7.x and earlier Description: The issue allows remote...

CVE-2009-3010: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting ...

CVE-2009-3015: Improper Neutralization of Input During Web Page Generation

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...

CVE-2009-3016: Improper Neutralization of Input During Web Page Generation

Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2 entering a javascript: URI...

CVE-2009-3017: Improper Neutralization of Input During Web Page Generation

Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, ...