CVE-2006-2435

Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls that may allow unintended execution of scripts."...

ProductCart XSS Vulnerability

ProductCart XSS Vulnerability found by atomix i came across the fact that in an area of ProductCart you are able to manipulate the error message, therefore allowing tags such as script and iframe to be used: http://www.website.com/ProductCart/pc/msg.asp?message=scriptalert document.cookie;/script...

CVE-2001-1004

Cross-site scripting CSS vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags...

CVE-2001-0999

Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script...

CVE-2001-0519

Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags...

CVE-2001-0520

CVE-2001-0520 affects Aladdin eSafe Gateway versions 3.0 and earlier. The vulnerability allows a remote attacker to bypass filtering of SCRIPT tags by embedding scripts within certain HTML constructs (e.g., onload in BODY, href in A, BUTTON, INPUT, or other tag-defined scripts). The NVD entry lis...

CVE-2000-0116

The CVE-2000-0116 entry affects Firewall-1. The vulnerability arises from insufficient filtering of script tags; attackers can bypass the Strip Script Tags restriction by prefixing an extra

fw1_script.tags.txt

Hi all, The "Strip Script Tags" in FW-1 can be circumvented by adding an extra tag like in this code: alert"hello world" test This code will pass unchanged, and still execute in both Navigator and Explorer. I tried this on version 3.0 of FW-1 on Windows NT 4.0 but I'm not able to check it on...

CVE-2000-0116

Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...