PT-2026-106184

Name of the Vulnerable Software and Affected Versions Ghost versions 2.1.0 through 6.63.0 Description Embedding a URL from an attacker-controlled website can lead to the storage of untrusted scripts within post content. These scripts may execute in the editor, on the published site, and in...

Выполнение JavaScript в контексте сервера

Можно вставить javascript в URL таким образом, что javascript будет выполнен в контексте сервера...

CVE-2000-0930

Pegasus Mail

CVE-2000-0727: Undefined Security Weakness

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...