Horde Vacation < 2.2.2 Parent Frame Page Title XSS

Binary data 2850.prm...

Horde Forwards < 2.2.2 Parent Frame Page Title XSS

Binary data 2855.prm...

Horde Accounts < 2.1.2 Parent Frame Page Title XSS

Binary data 2854.prm...

CVE-2005-1012

CVE-2005-1012 is an XSS vulnerability in Iatek SiteEnable. The issue allows remote attackers to inject arbitrary web script or HTML through (1) contenttype in content.asp, (2) the title, or (3) the description. The NVD entry confirms the affected component as SiteEnable and the impact is reflecte...

CVE-2005-0961

Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...

CVE-2005-0961: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...

CVE-2005-0878: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM private message...

CVE-2003-1090

CVE-2003-1090 describes a buffer overflow in AbsoluteTelnet prior to 2.12 RC10, allowing remote attackers to execute arbitrary code via a long window title. Affected product: AbsoluteTelnet; vulnerable component: window title handling; root cause: memory corruption due to overflow. Impact: remote...

CVE-2003-1090: Undefined Security Weakness

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title...

Microsoft Internet Explorer 6 - Pop-up Window Title Bar Spoofing

source: https://www.securityfocus.com/bid/12602/info Internet Explorer is reported prone to a pop-up window title bar spoofing weakness. The weakness is reported to exist due to a flaw that manifests in script-initiated pop-up windows. This issue may be leveraged by an attacker to display false U...

Microsoft Internet Explorer 6 - Pop-up Window Title Bar Spoofing

Microsoft Internet Explorer 6 - Pop-up Window Title Bar Spoofing source: https://www.securityfocus.com/bid/12602/info Internet Explorer is reported prone to a pop-up window title bar spoofing weakness. The weakness is reported to exist due to a flaw that manifests in script-initiated pop-up...

CVE-2005-0407

Cross-site scripting XSS vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title...

CVE-2005-0407: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title...

Portcullis Security Advisory 05-009

Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Execute Of Arbitrary Reports Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application Details: Portcullis consultants...

DEBIAN-CVE-2004-1204

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...

CVE-2004-1153: Undefined Security Weakness

Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an .ETD document containing format string specifiers in 1 title or 2 baseurl fields...

CVE-2004-1204: Undefined Security Weakness

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...

CVE-2003-0063

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the...

CVE-2003-0065

CVE-2003-0065 concerns the uxterm terminal emulator window-title reporting vulnerability. A malicious escape sequence can modify the terminal window title and, when echoed back to the command line, enable attacker-controlled input to be executed by the user’s shell. The related literature documen...

CVE-2003-0065

The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitra...