Code injection

PHPIDS before 20070703 does not properly handle use of the substr method in 1 document.location.search and 2 document.referrer; 3 certain use of document.location.hash; 4 certain "windoweval" and similar expressions; 5 certain Function expressions; 6 certain '=' expressions, as demonstrated by a...

CVE-2007-3577: Undefined Security Weakness

PHPIDS before 20070703 does not properly handle use of the substr method in 1 document.location.search and 2 document.referrer; 3 certain use of document.location.hash; 4 certain "windoweval" and similar expressions; 5 certain Function expressions; 6 certain '=' expressions, as demonstrated by a...

CVE-2001-0745

Technical details about CVE-2001-0745 are not publicly disclosed in the provided documents. Please monitor for updates as more specific information (affected products, impact, or remediation) is not present here.

CVE-2001-0745: Undefined Security Weakness

Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property...

Получение пути к почтовому ящику в Netscape (mbox path)

С помощью свойства document.referrer можно получить URI e-mail сообщения, содержащего полный путь к почтовому ящику, включая login пользователя...