CVE-2006-0070

Drupal allows remote attackers to conduct cross-site scripting XSS attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtere...

CVE-2006-0070

CVE-2006-0070 affects Drupal. The issue is a cross-site scripting (XSS) vector via an IMG tag containing an unusual encoded Javascript function name, demonstrated with variations of the alert() function. The connected sources confirm affected Drupal versions prior to 4.5.6 and prior to 4.6.4 when...

PT-2006-1155 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal versions prior to 4.5.6 Drupal versions prior to 4.6.4 when "Filtered HTML" is not enabled Description: The issue allows remote attackers to conduct cross-site scripting XSS attacks via an IMG tag with an unusual encoded Javascript...

drupal all versiyon xss

Drupal all versiyon xss ---------------------------------------------------- site:http://www.drupal.org Hex, Base64, Decimal site: http://liz0zim.no-ip.org/code.php -------------------------------------------------- img tag : on...

CVE-2005-4644

Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CVE-2005-4809

Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag...

CVE-2005-4809

Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag...

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/16300/info Phpclanwebsite is prone to a script-injection vulnerability. An attacker can nest BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HT...

CVE-2005-4450

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to serverprivileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown,...

CVE-2005-4343

Adobe formerly Macromedia ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability"...

MS Internet Explorer 6.0 (pre tag multiple single tags) Denial of Service

No description provided by source. !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" html head titleLets IE crash/title style type="text/css" pre white-space:normal; /style /head body pre span /span / /pre /body /html milw0rm.c...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

MS Internet Explorer 6.0 (pre tag multiple single tags) Denial of Service

Exploit for unknown platform in category dos / poc ========================================================================= MS Internet Explorer 6.0 pre tag multiple single tags Denial of Service ========================================================================= Lets IE crash pre...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

Horde IMP Webmail Client XSS all versions

Hello All, PRELUDE What is HORDE? http://www.horde.org/about/ The Mission The Horde Project is about creating high quality Open Source applications, based on PHP and the Horde Framework. The guiding principles of the Horde Project are to create solid standards-based applications using intelligent...

CVE-2004-2625

CVE-2004-2625 describes a cross-site scripting (XSS) vulnerability in Outblaze Email. The issue arises when an attacker injects arbitrary web script or HTML through Javascript in an attribute of an IMG tag, enabling remote attackers to execute code in victims’ browsers. The connected documents pr...

CVE-2004-2625

Cross-site scripting XSS vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag...

CVE-2004-2644

Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags...

CVE-2005-3973

Multiple cross-site scripting XSS vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the 1 legend tag and the value parameter used in 2 label and 3 input tags, possibly due t...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...