CVE-2003-1026: Undefined Security Weakness

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back back function is called, as demonstrated by BackToFramedJpu, aka th...

MSIE:patched&undisclosed XSS vuln

MSIE:patched&undisclosed XSS vuln "that's all" is end of file if you are in a hurry tested OS:Windows XP Professional Browser: MS Internet Explorer 6.0.2600.0000.xpclient.01087-1148 without any patch note: it doesn't work on the patched MSIE demo at...