CVE-2004-1594

CVE-2004-1594 is an XSS vulnerability in FuseTalk 4.0 where an attacker can trigger arbitrary script execution via an image tag (img src). Public references (NVD/NIST, CVSS 2.0 base score 4.3) corroborate a web context with no authentication required and partial integrity impact. A Nessus NASL en...

CVE-2004-1594: Undefined Security Weakness

Cross-site scripting XSS vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag...

CVE-2004-1050: Undefined Security Weakness

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long 1 SRC or 2 NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."...

CVE-2002-1493

The CVE-2002-1493 entry describes a cross-site scripting (XSS) vulnerability in the Lycos HTMLGear guestbook. The flaw allows remote attackers to inject arbitrary JavaScript via (1) STYLE attributes or (2) SRC attributes in an IMG tag. The provided sources confirm the vulnerability description bu...

CVE-2002-1493: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via 1 STYLE attributes or 2 SRC attributes in an IMG tag...

CVE-2004-0501: Undefined Security Weakness

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language VML entity whose src parameter points to the remote site, which could allow remote attackers to know whe...

CVE-2004-0502: Undefined Security Weakness

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shel...

Redirection and refresh parses local file

Redirection and refresh parses local file "that's all" is the end of file if you are in a hurry tested OS:WinXp Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/10/30 demo http://www.safecenter.net/UMBRELLAWEBV4/IredirNrefresh/IredirNrefresh-MyPage.htm exp if an iframe whose SRC points to a...

CVE-2002-0902: Undefined Security Weakness

Cross-site scripting vulnerability in phpBB 2.0.0 phpBB2 allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote " in the IMG tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects th...

DEBIAN-CVE-2002-0738

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by 1 splitting the SCRIPT tag into smaller pieces, 2 including the script in a SRC argument to an IMG tag, or 3 using "&=script" syntax...

CVE-2002-0591

CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...

CVE-2002-0591: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...

CVE-2002-0317: Undefined Security Weakness

Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...

CVE-2001-0807: Undefined Security Weakness

Internet Explorer 5.0, and possibly other versions, may allow remote attackers malicious web pages to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file...

CVE-2001-0397

CVE-2001-0397 describes a buffer overflow in Silent Runner Collector (SRC) 1.6.1 that can be triggered by a long SMTP HELO command. The vulnerability allows remote attackers to cause a denial of service and, potentially, execute arbitrary commands. CVSS v2 base metrics are provided: AV:N/AC:L/Au:...

CVE-2001-0397: Undefined Security Weakness

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

CVE-1999-0490

MSHTML.DLL in Internet Explorer 5.0 is affected by CVE-1999-0490. The vulnerability enables a remote attacker to cause information disclosure by using an IMG SRC tag to learn local file information. The documented impact is partial disclosure of data from the target user’s files, with network-bas...

CVE-1999-0490: Undefined Security Weakness

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag...

IBM HomePagePrint 1.0 7 - Remote Buffer Overflow

IBM HomePagePrint 1.0 7 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/763/info Certain versions of the IBM Web page printout software "IBM HomePagePrint " can in some instances be remotely exploited by malicious webservers. The problem lies in a buffer overflow in the code...

IBM HomePagePrint 1.0 7 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/763/info Certain versions of the IBM Web page printout software "IBM HomePagePrint " can in some instances be remotely exploited by malicious webservers. The problem lies in a buffer overflow in the code which handles IMGSRC tags. If a page containing ...