CVE-2005-3015: Undefined Security Weakness

Cross-site scripting XSS vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 BaseTarget or 2 Src parameters...

[Full-disclosure] SimpleCDR-X - Insecure tempfile handling

SimpleCDR-X - Insecure tempfile handling +----------------------------------------+ Date: 2005-09-15 URL: http://ogre.rocky-road.net/cdr.shtml Vendor Notified: Days ago, no answer. Version: 1.3.3 latest - Description - Files beeing recorded can be read by any user on the system due to insecure...

GroupWise WebAccess < 6.5 SP5 EMail IMG SRC XSS

Binary data 3087.prm...

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

CVE-2005-1282: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2004-1594

CVE-2004-1594 is an XSS vulnerability in FuseTalk 4.0 where an attacker can trigger arbitrary script execution via an image tag (img src). Public references (NVD/NIST, CVSS 2.0 base score 4.3) corroborate a web context with no authentication required and partial integrity impact. A Nessus NASL en...

CVE-2004-1594: Undefined Security Weakness

Cross-site scripting XSS vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag...

CVE-2004-1050: Undefined Security Weakness

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long 1 SRC or 2 NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."...

CVE-2002-1493

The CVE-2002-1493 entry describes a cross-site scripting (XSS) vulnerability in the Lycos HTMLGear guestbook. The flaw allows remote attackers to inject arbitrary JavaScript via (1) STYLE attributes or (2) SRC attributes in an IMG tag. The provided sources confirm the vulnerability description bu...

CVE-2002-1493: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via 1 STYLE attributes or 2 SRC attributes in an IMG tag...

CVE-2004-0501: Undefined Security Weakness

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language VML entity whose src parameter points to the remote site, which could allow remote attackers to know whe...

CVE-2004-0502: Undefined Security Weakness

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shel...

Redirection and refresh parses local file

Redirection and refresh parses local file "that's all" is the end of file if you are in a hurry tested OS:WinXp Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/10/30 demo http://www.safecenter.net/UMBRELLAWEBV4/IredirNrefresh/IredirNrefresh-MyPage.htm exp if an iframe whose SRC points to a...

CVE-2002-0902: Undefined Security Weakness

Cross-site scripting vulnerability in phpBB 2.0.0 phpBB2 allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote " in the IMG tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects th...

DEBIAN-CVE-2002-0738

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by 1 splitting the SCRIPT tag into smaller pieces, 2 including the script in a SRC argument to an IMG tag, or 3 using "&=script" syntax...

CVE-2002-0591

CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...

CVE-2002-0591: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...

CVE-2002-0317: Undefined Security Weakness

Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...

CVE-2001-0807: Undefined Security Weakness

Internet Explorer 5.0, and possibly other versions, may allow remote attackers malicious web pages to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file...