CVE-2002-1348

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies...

CVE-2003-0513

Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable...

CVE-2003-0514

Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the...

CVE-2003-0593

Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same...

CVE-2003-0594

Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same...

CVE-2003-0592

Konqueror in KDE 3.1.3 and earlier kdelibs allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a...

CVE-2003-0594

Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same...

CVE-2003-0514

Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the...

CVE-2003-0592

CVE-2003-0592 affects KDE’s kdelibs (Konqueror) up to version 3.1.3. The flaw lets remote attackers bypass cookie-path restrictions by using encoded relative path components (e.g., /.. or %2e%2e) in a URL, causing cookies to be sent to a path outside the intended subset and potentially to another...

CVE-2003-0593

CVE-2003-0593 describes a vulnerability in Opera where remote attackers can bypass cookie access restrictions by using encoded directory traversal sequences (%2e%2e) in a URL. This leads Opera to send cookies outside the intended URL subset to a potentially co-located application on the same serv...

CVE-2003-0513

Microsoft Internet Explorer is affected by CVE-2003-0513 through a cookie path-traversal issue. The root cause is that encoded directory traversal sequences ("%2e%2e") in a URL can bypass cookie scope restrictions, causing the browser to send cookies outside the intended URL subset to another app...

CVE-2003-0593

Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same...

CVE-2003-0592

Konqueror in KDE 3.1.3 and earlier kdelibs allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a...

CVE-2003-0513

Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable...

Directory traversal in multiple browsers cookie path

It's possible to access cookie from the document with different path...

Sandblad #12: Inject javascript url in history list (revisited)

Sandblad advisory 12 - /--------------------------------------------------------------/ Title: Inject javascript url in history list revisited Date: 2004-02-03 Software: Internet Explorer Vendor: http://www.microsoft.com/ Status: Patched by MS04-004 Type: Cross site/zone scripting Impact: Reading...

MPSB03-05 Patch and Work Around for Dreamweaver MX, DRK, and UltraDev Server Behaviors

In-Reply-To: [email protected] Thank you again for bringing this to the attention of Macromedia. The issues have been resolved. More information and the necessary patches are available at: http://www- staging.macromedia.com/devnet/security/securityzone/mpsb03-05.html MPSB03-...

showHelp("file:") disables security in IE - Sandblad advisory #11

Sandblad advisory 11 - /--------------------------------------------------------------/ Title: showHelp"file:" disables security in IE Date: 06-02-2003 Software: Internet Explorer 6.0, 5.x Vendor: http://www.microsoft.com/ Patch: The author has been working with the vendor to fix the...

[VulnWatch] administrivia: cross-site tracing

There's been a lot of back and forth about the recent WhiteHat Security XST bug. Sensationalism aside, the fact still remains: 1. Access to cookies, particularly the 'httponly' add-on by IE, is limited by browser security restrictions. And I don't recall any browser being able to legitimately...

DEBIAN-CVE-2002-1335

Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...