mailback script exploit

There is a mailback perl cgi script that has been in use for years, originally written by Erik C. Thauvin, which has some serious sercurity holes in it. One that is currently being exploited is that the contents of the subject pass to the script from the form are not sanitized before being passed...

USN-149-1: Firefox vulnerabilities

Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious web site to spoof the contents of other web sites. CAN-2005-1937 In several places the browser user interface did not...