Avant浏览器browser:home多个HTML注入漏洞

BUGTRAQ ID: 35898 Avant浏览器是一款使用方便的多窗口浏览器。以Internet Explorer内核为基础，并提供了很多增强功能。 Avant浏览器没有正确地过滤对browser:home页面多个部分（如History或Most Visited）的输入便返回给了用户，如果用户在访问了恶意网站后显示了这个页面就会导致注入并执行任意HTML和脚本代码。 Avant Force Avant Browser 11.7 build 35 厂商补丁： Avant Force -----------...

CVE-2008-4166

Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service application crash by attempting to URL encode a string containing many instances of an invalid character...

Integer overflow

Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service application crash by attempting to URL encode a string containing many instances of an invalid character...

CVE-2008-4166

The CVE-2008-4166 entry describes an integer overflow in the JavaScript engine of Avant Browser, affecting version 11.7 Build 9 and earlier. The vulnerability allows a remote attacker to cause a denial of service (application crash) by URL-encoding a string containing many invalid characters. No ...

CVE-2008-4166

Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service application crash by attempting to URL encode a string containing many instances of an invalid character...

Avant Browser <= 11.7 Build 9 Integer Denial Of Service Exploit

!-- - Product : Avant Browser - - Version : 11.7 Build 9 - - Author : 0x90 - - Homepage: WwW.0x90.CoM.Ar - - Contact : Gunsat0x90dotcomdotar -- script var s=String.fromCharCode257; var a=""; var b=""; fori=0;i1024;i++a=a+s; fori=0;i1024;i++b=b+a; var ov=s; fori=0;i28;i++ ov += ov; fori=0;i88;i++ ...

Avant Browser DoS

Integer overflow on Javascript handling...

Avant Browser 11.7 Build 9 - JavaScript Engine Integer Overflow

Avant Browser 11.7 Build 9 - JavaScript Engine Integer Overflow source: https://www.securityfocus.com/bid/31155/info Avant Browser is prone to an integer-overflow vulnerability that occurs in the JavaScript engine. An attacker can exploit this issue by enticing an unsuspecting victim to view a...

avant-dos.txt

var s=String.fromCharCode257; var a=""; var b=""; fori=0;i...

Avant Browser 11.7 Build 9 - JavaScript Engine Integer Overflow

source: https://www.securityfocus.com/bid/31155/info Avant Browser is prone to an integer-overflow vulnerability that occurs in the JavaScript engine. An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious site. Successfully exploiting this issue may allow...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite commosmedia 4.5.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 credits.html.php, 2 info.html.php, 3...

CVE-2007-5362

The CVE-2007-5362 entry describes multiple PHP remote file inclusion (RFI) vulnerabilities in Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 for Mambo/Joomla!, allowing an attacker to execute arbitrary PHP code via mosConfig_absolute_path in includes/ (credits.html.php, info.html.php, m...

CVE-2007-5362

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite commosmedia 4.5.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 credits.html.php, 2 info.html.php, 3...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 support.html.php or 2 info.html.php. NOTE: the provenance of...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia commosmedia 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 media.tab.php or 2 media.divs.php...

CVE-2007-2043

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia commosmedia 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 media.tab.php or 2 media.divs.php...

CVE-2007-2042

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 support.html.php or 2 info.html.php. NOTE: the provenance of...

CVE-2007-2042

The CVE describes multiple PHP remote file inclusion vulnerabilities in Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier for Mambo, where an attacker can trigger arbitrary PHP code execution by supplying a URL in the mosConfig_absolute_path parameter to either support.html.php or info.html.p...

CVE-2007-2043

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia commosmedia 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 media.tab.php or 2 media.divs.php...

CVE-2007-2043

CVE-2007-2043 describes multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) module for Mambo/Joomla! (versions 1.08 and earlier). The flaws allow remote attackers to execute arbitrary PHP code by supplying a crafted URL to the mosConfig_absolute...