Unfixed XSS vulnerability at www.sektorum.org

Security researcher PotentialQuilty, has submitted on 18/07/2008 a cross-site-scripting XSS vulnerability affecting www.sektorum.org, which at the time of submission ranked 2499992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/07/2008. It ...

CSRF through HTML message in squirrelmail

Cross-site request forgery CSRF vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element...

Google Reader cross-site request forgery vulnerability

Overview Google Reader is vulnerable to a persistent cross-site request forgery attack that may be exploited by a specially crafted RSS feed. Description Google Reader is an online RSS feed reader. It can display text and images when displaying RSS feeds.Google Reader contains a cross-site reques...

security flaw

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting XSS protection by changing the src attribute of an IMG element to a javascript: URI...

security flaw

Cross-site scripting XSS vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into 1 performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or 2 selecting "Show on...

Toasts Forums 1.6.44 in Xss

ENGLISH Title : Toast Forums 1.6.44 in Xss Author : ajann Exploit; XSS Example Forum Post Message,Reply.. IMG onmouseover=Javascript:alertdocument.domain src="x.gif" Alert: xxx.com / ajann,Turkey TURKISH Baslk : Toast Forums 1.6.44 in Xss Ac Bulan : ajann Ack bulunan dosyalar; Foruma post...

PYSEC-2005-1

Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CommuniGate Pro Webmail 4.0.6 - Session Hijacking

CommuniGate Pro Webmail 4.0.6 - Session Hijacking !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your...

CVE-2000-0156

Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability...

CVE-2000-0156: Undefined Security Weakness

Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability...