CVE-2006-0842

Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...

CVE-2006-0842

Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...

Code injection

Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitimate "href" attribute, a form whose action points to a malicious URL, and an INPUT submit element that is modified to lo...

CVE-2006-0799

Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitimate "href" attribute, a form whose action points to a malicious URL, and an INPUT submit element that is modified to lo...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service client crash via a certain combination of a malformed HTML file and a CSS file that triggers a null dereferenc...

CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

Buffer overflow

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

Code injection

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 aka 7.0.5296.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" dash of hyphen characters...

CVE-2006-0544

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 aka 7.0.5296.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" dash of hyphen characters...

CVE-2006-0544

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 aka 7.0.5296.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" dash of hyphen characters...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

CVE-2006-0365

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

Cross site scripting

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

CVE-2006-0364

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

CVE-2006-0365

Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...

CVE-2006-0365

CVE-2006-0365 concerns a Cross-site Scripting (XSS) vulnerability in XMB (extreme message board). The issue enables remote attackers to inject arbitrary web script or HTML by supplying JavaScript in the SRC attribute of an IMG element. Documents do not provide specific vulnerable versions, exploi...

Microsoft Internet Explorer 5.0.1 - Malformed .IMG .XML Parsing Denial of Service

Microsoft Internet Explorer 5.0.1 - Malformed .IMG .XML Parsing Denial of Service source: https://www.securityfocus.com/bid/16240/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue presents itself when the browser handles a specially crafted IMG element ...

Microsoft Internet Explorer 5.0.1 - Malformed .IMG / .XML Parsing Denial of Service

source: https://www.securityfocus.com/bid/16240/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue presents itself when the browser handles a specially crafted IMG element in a malformed XML block. An attacker may exploit this issue by enticing a user to...

Cross site scripting

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...