Code injection

PHPIDS before 20070703 does not properly handle use of the substr method in 1 document.location.search and 2 document.referrer; 3 certain use of document.location.hash; 4 certain "windoweval" and similar expressions; 5 certain Function expressions; 6 certain '=' expressions, as demonstrated by a...

CVE-2001-0745

Technical details about CVE-2001-0745 are not publicly disclosed in the provided documents. Please monitor for updates as more specific information (affected products, impact, or remediation) is not present here.

Получение пути к почтовому ящику в Netscape (mbox path)

С помощью свойства document.referrer можно получить URI e-mail сообщения, содержащего полный путь к почтовому ящику, включая login пользователя...