CVE-2009-1691

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript...

CVE-2009-1691

CVE-2009-1691 is a cross-site scripting (XSS) vulnerability affecting WebKit in Apple Safari prior to 4.0, and the iPhone OS family up to 2.2.1. The root cause is insufficient access control for standard JavaScript prototypes across domains, enabling remote attackers to inject arbitrary web scrip...