5035 matches found
Microsoft Internet Explorer 5 - Document Reference Zone Bypass
Microsoft Internet Explorer 5 - Document Reference Zone Bypass source: https://www.securityfocus.com/bid/5841/info A vulnerability has been reported in Microsoft Internet Explorer that may allow for remote attackers to execute script code in the context of other domains/security Zones. The cause...
PHP-Nuke 6.0/6.5 - Search Form Cross-Site Scripting
source: https://www.securityfocus.com/bid/5788/info PHPNuke 6.0 is prone to cross-site scripting attacks. HTML tags are not filtered from links to the 'modules.php' script. Reportedly, the problem lies in the 'Search' page of the 'modules.php' script. It is possible for a malicious attacker to...
LEVERAGING CROSS-PROTOCOL SCRIPTING IN MSIE
The following was researched and written before I installed IE SP1. read to the bottom to see whats changed LEVERAGING CROSS-PROTOCOL SCRIPTING IN MSIE ---------------------------------------------------------------------------- -------------------------- Introduction...
Who framed Internet Explorer (GM#010-IE)
GreyMagic Security Advisory GM010-IE ===================================== By GreyMagic Software, Israel. 09 Sep 2002. Available in HTML format at http://security.greymagic.com/adv/gm010-ie/. Topic: Who framed Internet Explorer. Discovery date: 04 Aug 2002. Affected applications:...
CVE-2002-1085
CVE-2002-1085 affects ezContents 1.41 and earlier, with multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to execute scripts and steal cookies via the diary and other capabilities. The NVD entry records a CVSSv2 base score of 7.5 (HIGH) with network attack vector, lo...
OmniHTTPd test.shtml Cross-Site Scripting Issue
OmniHTTPd's Test.shtml sample is also vulnerable to a similar issue: http://localhost/test.shtml?3CSCRIPT3Ealertdocument.URL3C2FSCRIPT3E=x Will pop up an alert containing the above URL. Of course, this has other uses cookie theft, faking sources, etc...
OmniHTTPd 1.1/2.0.x/2.4 - test.shtml Sample Application Cross-Site Scripting
source: https://www.securityfocus.com/bid/5568/info Cross site scripting vulnerabilities have been reported in multiple sample scripts including with OmniHTTPD. In particular, test.shtml and test.php contain errors. This type of vulnerability may be used to steal cookies or perform other web-base...
OmniHTTPd 1.12.0.x2.4 - test.php Sample Application Cross-Site Scripting
OmniHTTPd 1.12.0.x2.4 - test.php Sample Application Cross-Site Scripting source: https://www.securityfocus.com/bid/5568/info Cross site scripting vulnerabilities have been reported in multiple sample scripts including with OmniHTTPD. In particular, test.shtml and test.php contain errors. This typ...
OmniHTTPd 1.12.0.x2.4 - test.shtml Sample Application Cross-Site Scripting
OmniHTTPd 1.12.0.x2.4 - test.shtml Sample Application Cross-Site Scripting source: https://www.securityfocus.com/bid/5568/info Cross site scripting vulnerabilities have been reported in multiple sample scripts including with OmniHTTPD. In particular, test.shtml and test.php contain errors. This...
OmniHTTPd 1.1/2.0.x/2.4 - 'test.php' Sample Application Cross-Site Scripting
source: https://www.securityfocus.com/bid/5568/info Cross site scripting vulnerabilities have been reported in multiple sample scripts including with OmniHTTPD. In particular, test.shtml and test.php contain errors. This type of vulnerability may be used to steal cookies or perform other web-base...
Mozilla Bonsai - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/5516/info Multiple cross site scripting vulnerabilities have been reported for the Bonsai tool. An attacker may exploit this vulnerability by causing a victim user to follow a malicious link. Attacker-supplied code may execute within the context of the si...
CVE-2002-0756
Cross-site scripting vulnerability in the authentication page for 1 Webmin 0.96 and 2 Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies...
CVE-2002-0413
Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script...
CVE-2002-0739
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page...
CVE-2002-0771
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...
W3C CERN HTTPd 3.0 Proxy - Cross-Site Scripting
W3C CERN HTTPd 3.0 Proxy - Cross-Site Scripting source: https://www.securityfocus.com/bid/5447/info CERN httpd is a freely available HTTP server and HTTP proxy server available from the W3C. The httpd Proxy is vulnerable to a cross site scripting attack. The condition is present because of the wa...
CVE-2002-0756
Cross-site scripting vulnerability in the authentication page for 1 Webmin 0.96 and 2 Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies...
CVE-2002-0739
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page...
Mozilla cookie stealing - Sandblad advisory #9
Sandblad advisory 9 - ---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Steal/spoof arbitrary cookie in Mozilla Date: 2002-07-24 Software: Mozilla Vendor: http://www.mozilla.org Fix: The author has been working with Mozilla to produce a patch. Problem is fixed in Mozilla 1.1...