108 matches found
ICQ client cross application scripting
It's possible to inject script code into banner window to execute code in My Computer security zone...
Multiple vulnerability scanners cross application scripting
Unsafe data obtained during remote host scan is passed to Internet Explorer...
CVE-2005-2442
Cross-Application Scripting XAS vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another...
CVE-2005-2442
CVE-2005-2442 concerns a Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196. The connected documents confirm the issue arises in WebInspect and enables remote attackers to inject Javascript from one application into another (XAS), with remote exploitation described...
SPI Dynamics WebInspect 5.0.196 - Cross Application Script Injection
SPI Dynamics WebInspect 5.0.196 - Cross Application Script Injection source: https://www.securityfocus.com/bid/14385/info WebInspect is vulnerable to a cross-application script injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied data prior...
SPI Dynamics WebInspect 5.0.196 - Cross Application Script Injection
source: https://www.securityfocus.com/bid/14385/info WebInspect is vulnerable to a cross-application script injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied data prior to including it in content rendered in an Internet Explorer COM...
SPIDynamics WebInspect Cross-Application Scripting (XAS)
PIDynamics WebInspect Cross-Application Scripting XAS I. BACKGROUND SPIDynamics WebInspect is powerful security assessment tool for Web application vulnerable to XAS which could lead to remote code execution. II. DESCRIPTION As many applications WebInspect uses external programs and Windows...
TREND MICRO: The Protector Becomes The Vector [technical exercise: cross-application-scripting]
Thursday, June 03, 2004 The following represents an interesting technical examination when the so-called "Anti-Virus" protector becomes the Virus "Vector". Naturally this is the result of relying on the "plug and play" or "module" of one Internet Explorer browser and operating system from a produ...