5804 matches found
Cross site scripting
ext/filter in PHP 5.2.0, when FILTERSANITIZESTRING is used with the FILTERFLAGSTRIPLOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting XSS attacks via HTML with a '' character followed by certain whitespace characters, which passes one filter...
CVE-2007-1454
ext/filter in PHP 5.2.0, when FILTERSANITIZESTRING is used with the FILTERFLAGSTRIPLOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting XSS attacks via HTML with a '' character followed by certain whitespace characters, which passes one filter...
CVE-2006-7059
Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities &0000039 in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...
CVE-2006-7059
Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities &0000039 in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...
CVE-2006-7059: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities ' in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...
CVE-2006-7033
Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...
CVE-2006-7033
Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...
CVE-2006-7030
The CVE-2006-7030 entry concerns Microsoft Internet Explorer 6 SP2 and earlier. It describes a vulnerability where remote attackers can cause a denial of service (crash) by delivering certain malformed HTML, potentially involving applet and base tags without required arguments, which triggers a n...
CVE-2006-7033
The CVE-2006-7033 entry describes a Cross-site Scripting (XSS) vulnerability in Super Link Exchange Script 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through IMG tags in the search box. This affects the vulnerable component (the search input handling in Super Lin...
CVE-2006-7033: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...
Microsoft Internet Explorer 6 - Local File Access
Microsoft Internet Explorer 6 - Local File Access source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker...
Microsoft Internet Explorer 6 - Local File Access
source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...
CVE-2006-6954
Flock beta 1 0.7 allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6955
Opera allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6954
Flock beta 1 0.7 allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2007-0537
The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...
CVE-2006-6954
Flock beta 1 0.7 allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6956
Microsoft Internet Explorer allows remote attackers to cause a denial of service crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6955
Opera before 10.53 on Windows and Mac OS X is vulnerable to DoS (application crash) through a page containing a large number of nested tags, due to improper handling of asynchronous document modifications. This vulnerability is related to CVE-2006-2723. The available connected sources indicate t...
CVE-2006-6955: Improper Input Validation
Opera allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...