Improper character decoding in HZ-GB-2312 charset — Mozilla

Security researcher Masato Kinugawa found when HZ-GB-2312 charset encoding is used for text, the "" character will destroy another character near the chunk delimiter. This can lead to a cross-site scripting XSS attack in pages encoded in HZ-GB-2312...

Unfixed XSS vulnerability at www.ithaki.net

Security researcher HZ, has submitted on 24/09/2008 a cross-site-scripting XSS vulnerability affecting www.ithaki.net, which at the time of submission ranked 328360 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currently...

Unfixed XSS vulnerability at www.bruinwalk.com

Security researcher HZ, has submitted on 24/09/2008 a cross-site-scripting XSS vulnerability affecting www.bruinwalk.com, which at the time of submission ranked 326632 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currently...

Unfixed XSS vulnerability at www.internetfrog.com

Security researcher HZ, has submitted on 23/09/2008 a cross-site-scripting XSS vulnerability affecting www.internetfrog.com, which at the time of submission ranked 48990 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currentl...

Unfixed XSS vulnerability at www.bowwow.com.au

Security researcher HZ, has submitted on 23/09/2008 a cross-site-scripting XSS vulnerability affecting www.bowwow.com.au, which at the time of submission ranked 232093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currently...

Mozilla Foundation Security Advisory 2008-13

Mozilla Foundation Security Advisory 2008-13 Title: Multiple XSS vulnerabilities from character encoding Impact: Moderate Announced: March 25, 2008 Reporter: Alexey Proskuryakov, Yosuke Hasegawa, Simon Montagu Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 Thunderbird 2.0.0....