1052 matches found
[SA19248] Inprotect "zones.php" Script Insertion Vulnerabilities
TITLE: Inprotect "zones.php" Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA19248 VERIFY ADVISORY: http://secunia.com/advisories/19248/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Inprotect 0.x http://secunia.com/product/8745/ DESCRIPTION: $um$id has...
Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability
Description The Microsoft Windows HTML Help ActiveX control hhctrl.ocx is prone to a vulnerability that may permit cross-zone scripting. The HTML Help control is a component that allows help functionality to be inserted in an HTML file. It is possible to exploit this vulnerability through Interne...
Microsoft Internet Explorer 5 - window.open Search Pane Cross-Zone Scripting
source: https://www.securityfocus.com/bid/9798/info A vulnerability has been reported in Microsoft Internet Explorer that could enable unauthorized access by malicious scripts and Active Content to document properties across different Security Zones and foreign domains. This issue is exposed when...
Microsoft Internet Explorer 5 - Classic Mode FTP Client Cross Domain Scripting
source: https://www.securityfocus.com/bid/7810/info The Microsoft Internet Explorer FTP indexing implementation could allow script code to be executed in the security zone of another FTP site. This vulnerability only exists when Internet Explorer FTP is used in "Classic Mode". Any script would be...
Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL]
Systems Affected : Internet Explorer 6.0.2800 6.x? Remotely exploitable: Yes Author: Marek Bialoglowy System Integra - [email protected] Attached files: dmz2.rar archive password:zones Note: This is part of my research and the purpose of this post is to consult results and potential...
Microsoft Internet Explorer does not adequately validate references to cached objects and methods
Overview Microsoft Internet Explorer does not adequately validate references to cached objects and methods across domains and security zones. The impact is similar to that of a cross-site scripting vulnerability, allowing an attacker to access data in other sites, including the Local Computer zon...
Microsoft Internet Explorer 56 - Cached Objects Zone Bypass
Microsoft Internet Explorer 56 - Cached Objects Zone Bypass source: https://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with...
MSIE:"SaveRef" turns Zone off
TITLEMSIE:"SaveRef" turns Zone off/TITLE digest MSIE: you can execute jscript in any zone by saving the reference of "NewWindow.location.assign". content after the "exp" section is not directly related to the flaw, so skip it if you are in a hurry; testedMSIEv6CN version IEXPLORE.EXE file version...
CVE-2000-0061
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading...
Security update 1970-01-01
...