CVE-2006-6986

PhaseOut 5.4.4 is affected by a cross-domain information disclosure vulnerability. An attacker can cause an object element to reference a URL on the attacker’s site which returns a Location header pointing to the target site; the target content then becomes accessible via the outerHTML attribute ...

CVE-2006-6991

Technical details about CVE-2006-6991 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2006-6988

CVE-2006-6988 (Slim Browser 4.07 build 100) : Cross-domain information disclosure via an object tag with a data parameter referencing an attacker site. The attacker’s link specifies a Location header that references the target site, allowing content to be exposed through the object’s outerHTML at...

CVE-2006-6989

Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the...

CVE-2006-6983

CVE-2006-6983 documents a cross-domain information disclosure in MYweb4net Browser 3.8.8.0. The vulnerability arises from an object tag with a data parameter referencing a link that points to a Location header on the attacker's site, allowing the target content to be exposed via the outerHTML att...

CVE-2006-6992

Technical details about CVE-2006-6992 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2006-6991: Undefined Security Weakness

Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

CVE-2006-6985: Undefined Security Weakness

Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

CVE-2006-6986: Undefined Security Weakness

Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which...

CVE-2006-6989: Undefined Security Weakness

Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the...

CVE-2006-6987: Undefined Security Weakness

Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

CVE-2006-6983: Undefined Security Weakness

Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

CVE-2006-6988: Undefined Security Weakness

Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

CVE-2006-3280: Undefined Security Weakness

Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the...

CVE-2006-2996: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dirdata parameter...

CVE-2006-0562: Undefined Security Weakness

Cross-site scripting XSS vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter...

CVE-2005-1059: Undefined Security Weakness

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html...