CVE-2013-6657: Undefined Security Weakness

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information vi...

Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Mac OS X)

This host is installed with Apple Safari and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariwebcorewebkitxssvulnmacosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability Mac OS X Authors: Antu Sana...

Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability - Linux

Google Chrome is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WebKit跨站脚本保护绕过漏洞

CVE ID:CVE-2012-5851 WebKit是一款开放源代码的浏览器引擎。 Google Chrome 22及Safari 5.1.7使用的WebKit中WebCore html/parser/XSSAuditor.cpp没有考虑到所有可能的反射数据所输出的内容，允许攻击者通过特制的字符串比较容易的绕过跨站脚本保护机制。 0 Google Chrome 22使用的WebKit Apple Safari 5.1.7使用的WebKit 目前没有详细解决方案提供： http://www.webkit.org...

CVE-2012-5851

html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting XSS protection mechanism via a crafted string, aka...

CVE-2012-5851: Improper Neutralization of Input During Web Page Generation

html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting XSS protection mechanism via a crafted string, aka...

PT-2012-6151

Name of the Vulnerable Software and Affected Versions WebKit versions prior to the version that fixes the issue in Google Chrome through 22 and Safari 5.1.7 Description The issue makes it easier for remote attackers to bypass a cross-site scripting protection mechanism. This is due to the...