CVE-2008-1002

CVE-2008-1002 is an XSS in Apple Safari before 3.1 that allows remote attackers to inject arbitrary web script via a crafted javascript: URL. Impact is execution of JavaScript in another site’s context if a user visits a malicious page; exploitation requires the user to view the page. The issue w...

CVE-2008-1002

Cross-site scripting XSS vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL...