2311 matches found
The link tooltip and the statusbar can be misleading – Opera Security Advisories
The link tooltip and the statusbar can be misleading – Opera Security Advisories OPCOM Team | February 17, 2006 Summary Opera’s status bar shows the “title” attribute of a form inputimage, not the form’s “action” URL. This may mislead the user. Severity: Very low Problem description It is possibl...
PT-2005-5208 · Clearswift · Clearswift Mimesweeper For Web
Name of the Vulnerable Software and Affected Versions: Clearswift MIMEsweeper For Web a.k.a. WEBsweeper versions 4.0 through 5.1 Description: The issue allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file. Recommendations: For...
DEBIAN-CVE-2005-4305
Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...
security flaw
Cross-site scripting XSS vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."...
DEBIAN-CVE-2005-3166
Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service corruption of the previous submission via a crafted URL...
security flaw
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in 1 the URL or 2 an e-mail message...
security flaw
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass urlregex ACLs via a URL with a NULL "%00" character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists...
DEBIAN-CVE-2002-1565
Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...
DEBIAN-CVE-2002-1390
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL...
PT-1997-1156 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a guessable password for accessing a WWW URL. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
