117 matches found
Maxthon Web Browser < 1.3.3 Cross-Domain Dialog Box Spoofing
Binary data 3240.prm...
CVE-2005-1090
Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files...
CVE-2005-0905
Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2searchtext property...
CVE-2005-1091
Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...
maxthon_arbitrary_read-write.html.txt
var iVuln=null; function checkVuln try if external.readFilemaxsecurityid,"m2bookmark","plugin.ini"!=null pls.innerText='Done!'; alert"Vulnerable!"; showFileContent; window.clearIntervaliVuln; else window.status=''; // Refresh the "max.src" script by setting the source file as the same file...
CVE-2005-1090
Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files...
CVE-2005-1091
Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...
CVE-2005-1091
Maxthon 1.2.0 and 1.2.1 expose a vulnerability where remote attackers can bypass a security ID and call restricted plugin API functions by crafting a page that includes max.src. The NVD entry CVE-2005-1091 documents this as a cross-page script inclusion issue allowing limited privileges to be use...
CVE-2005-1090
CVE-2005-1090 affects Maxthon versions 1.2.0 and 1.2.1. A directory traversal vulnerability exists in the readFile and writeFile API, enabling a remote attacker to read or write arbitrary files. The provided documents describe the vulnerability but do not detail exploitation steps, specific filen...
[Full-disclosure] Maxthon browser multiple vulnerabilities advisory
Maxthon browser multiple vulnerabilities advisory URL: http://www.raffon.net/advisories/maxthon/multvulns.html Date: April 08, 2005 Author: Aviv Raff Introduction "Maxthon Internet Browser software is a powerful tabbed browser with a highly customizable interface. It is based on the Internet...
Maxthon browser multiple bugs
Directory traversal, local files access, etc...
CVE-2005-0905
CVE-2005-0905 relates to Maxthon 1.2.0, where remote websites could obtain potentially sensitive data from the browser’s search bar via the m2_search_text property. The available documents identify the affected product/version and the vulnerable data exposure mechanism but do not provide explicit...
CVE-2005-0905
Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2searchtext property...
Maxthon search bar information leak
Javascript may access search strings...
[SA14712] Maxthon "m2_search_text" Search Bar Exposure of Information
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Maxthon "m2searchtext" Search Bar Exposure of...
Maxthon Web Browser 1.2 - Search Bar Information Disclosure
source: https://www.securityfocus.com/bid/12898/info Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser. Information disclosed through the exploitation of this vulnerability ma...
Maxthon Web Browser 1.2 - Search Bar Information Disclosure
Maxthon Web Browser 1.2 - Search Bar Information Disclosure source: https://www.securityfocus.com/bid/12898/info Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser. Information...