Уявзвимость в IIS при обработке HTW (.htw URL script)

При обращении к .htw файлам URL может содержать скрипт. При выдаче дагностического сообщения URL не будет комментироваться, что позволяет выполнить скрипт в контексте сервера...

CVE-1999-0942

UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes...

CVE-2000-0746: Undefined Security Weakness

Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting CSS attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those...

Заткнуты дырки в IE (Scriptlet Rendering, IE Script)

Несколько дырок позволявших выполнять скрипты в контексте локальной машины и обращаться к локальным файлам...

CVE-1999-0488: Undefined Security Weakness

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability...

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutabl...

CVE-1999-0488

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability...

CVE-1999-0268

MetaInfo MetaWeb web server allows users to upload, execute, and read scripts...