6225 matches found
CVE-2007-0896
Cross-site scripting XSS vulnerability in the 1 Sage before 1.3.10, and 2 Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "SCRIPT/=''SRC='" sequence in an RSS feed, a different vulnerability than CVE-2006-4712...
CVE-2007-0896
Cross-site scripting XSS vulnerability in the 1 Sage before 1.3.10, and 2 Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "SCRIPT/=''SRC='" sequence in an RSS feed, a different vulnerability than CVE-2006-4712...
CVE-2007-0896
Cross-site scripting XSS vulnerability in the 1 Sage before 1.3.10, and 2 Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "SCRIPT/=''SRC='" sequence in an RSS feed, a different vulnerability than CVE-2006-4712...
Sage 1.3.6 - Extension Feed HTML Injection
source: https://www.securityfocus.com/bid/22493/info Sage Extension Feed is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Hostile HTML and script code may be injected into vulnerabl...
Cross site scripting
Cross-site scripting XSS vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes...
CVE-2007-0362
Cross-site scripting XSS vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes...
CVE-2007-0362
Cross-site scripting XSS vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes...
CVE-2007-0362
CVE-2007-0362 affects FreshReader’s RSS feed component prior to 1.0.07010600. The vulnerability is a cross-site scripting (XSS) flaw that could allow remote attackers to inject arbitrary scripts or HTML, potentially via tag attributes, with the impact being execution of scripts in a user’s browse...
CVE-2007-0362: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes...
JVN#95249468 Fresh Reader RSS feed cross-site scripting vulnerability
Impact An arbitrary script could be executed on the web browser of a Fresh Reader user. Solution Products Affected Fresh Reader Ver 1.0.06053100 and earlier For more information, refer to the vendor's website...
CVE-2006-6919
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing "", which Sage modifies to close the img element before the malicious script...
CVE-2006-6919: Undefined Security Weakness
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing "", which Sage modifies to close the img element before the malicious script...
CVE-2007-0051
Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...
CVE-2007-0051: Use of Externally-Controlled Format String
Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...
Unfixed XSS vulnerability at www.hack-medya.org
Security researcher St@rExT, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.hack-medya.org, which at the time of submission ranked 344892 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...
CVE-2006-6506
The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...
CVE-2006-6506
The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...
CVE-2006-6506
The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...
CVE-2006-6506: Undefined Security Weakness
The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...
RSS Feed-preview referrer leak — Mozilla
Jared Breland reported on LEGROOM.net that when the new "Feed Preview" feature in Firefox 2.0 retrieves the icons of the installed web-based feed viewers it is potentially informing those services of your feed-browsing habits by sending the URL of the feed in a referrer header with each icon...