IE allows universal Cross Domain Scripting (TL#003)

Thor Larholm, PivX, security advisory TL003 ------------------------------------- By Thor Larholm, Denmark 10 July 2002 HTML format: http://www.PivX.com/larholm/adv/TL003/ Topic: IE allows universal Cross Domain Scripting. Discovery date: 25 June 2002. Severity: High Affected applications:...

ALERT: Lil'HTTP Server (Summit Computer Networks)

ALERT: Lil'HTTP Server Summit Computer Networks Vendor Notified: June 26 I have informed Summit of a flaw in its Lil'HTTP Server. The vulnerability lies in the "REPORT" functionality of urlcount.cgi. The flaw may allow malicious webmasters to script actions across domains. Users can protect...