526 matches found
CVE-2002-2101: Undefined Security Weakness
Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag...
FreeBSD : opera -- image dragging vulnerability (934b1de4-00d7-11da-bc08-0001020eed82)
A Secunia Advisory reports : Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to conduct cross-site scripting attacks and retrieve a user's files. The vulnerability is caused due to Opera allowing a user to drag e.g. an image, which is actually ...
CVE-2005-2406: Improper Neutralization of Input During Web Page Generation
Opera 8.01 allows remote attackers to conduct cross-site scripting XSS attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI...
CVE-2005-2276: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "jAvascript" in an IMG tag...
Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution
source: https://www.securityfocus.com/bid/12097/info WPKontakt is reported prone to a potential script execution vulnerability. It is reported that this issue may allow remote attackers to execute arbitrary script code on a vulnerable computer, which may lead to various attacks. Arbitrary script...
