CVE-2005-0648

Pixel-Apes SafeHTML (pre-1.3.0) contains vulnerabilities that allow remote attackers to bypass XSS protections via (1) decimal HTML entities or (2) the null byte \x00 symbol. Affected component is SafeHTML prior to version 1.3.0. Impact is HTML/script injection bypass of protections; no other sys...

CVE-2005-0649

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

CVE-2005-0649

Pixel-Apes SafeHTML prior to version 1.2.1 is vulnerable to bypassing XSS protection via hexadecimal HTML entities. Affected: SafeHTML component (pre-1.2.1). Root cause: input handling allows bypass of HTML entity encoding to defeat XSS protections. Impact: potential remote XSS. Exploitation deta...

CVE-2005-0648: Undefined Security Weakness

Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting XSS protection via 1 "decimal HTML entities" or 2 "the \x00 symbol."...

CVE-2005-0649: Undefined Security Weakness

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

[SA13869] SafeHTML Hexadecimal HTML Entities Security Bypass

TITLE: SafeHTML Hexadecimal HTML Entities Security Bypass SECUNIA ADVISORY ID: SA13869 VERIFY ADVISORY: http://secunia.com/advisories/13869/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SafeHTML 1.x http://secunia.com/product/4527/ DESCRIPTION: Christian...