CVE-2008-3172

Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."...

Cross site scripting

Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and...

CVE-2008-3172

Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."...

CVE-2008-3170

Technical details about CVE-2008-3170 are not publicly available in the provided connected documents; monitor for updates.

CVE-2008-3170

Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and...

Unfixed XSS vulnerability at www.dir.bg

Security researcher loshiq, has submitted on 07/11/2008 a cross-site-scripting XSS vulnerability affecting www.dir.bg, which at the time of submission ranked 3398 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

------------------------------------------------------------------------ Debian Security Advisory DSA-1605-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.downloadaccess.org

Security researcher zprian, has submitted on 07/05/2008 a cross-site-scripting XSS vulnerability affecting www.downloadaccess.org, which at the time of submission ranked 902021 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/05/2008. It is...

Unfixed XSS vulnerability at www.aslpage.be

Security researcher GeNkStAr, has submitted on 25/06/2008 a cross-site-scripting XSS vulnerability affecting www.aslpage.be, which at the time of submission ranked 52179 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is currentl...

Unfixed XSS vulnerability at www.bsg.co.za

Security researcher Reelix, has submitted on 23/06/2008 a cross-site-scripting XSS vulnerability affecting www.bsg.co.za, which at the time of submission ranked 468733 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is currently...

Unfixed XSS vulnerability at www.zauralom.net

Security researcher THEMILLER, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting www.zauralom.net, which at the time of submission ranked 6847645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/06/2008. It is...

Unfixed XSS vulnerability at www.southsummit.com

Security researcher xylitol, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.southsummit.com, which at the time of submission ranked 944511 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2008. It is...

Unfixed XSS vulnerability at www.jambase.com

Security researcher skathgh420, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.jambase.com, which at the time of submission ranked 18486 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

Unfixed XSS vulnerability at www.entreparticuliers.com

Security researcher xerces, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.entreparticuliers.com, which at the time of submission ranked 21877 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

Unfixed XSS vulnerability at www.azimdagitim.com

Security researcher bycasper41, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.azimdagitim.com, which at the time of submission ranked 1281873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

Unfixed XSS vulnerability at www.allegrodev.com

Security researcher general, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.allegrodev.com, which at the time of submission ranked 2401111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is...

Unfixed XSS vulnerability at www.stokard.be

Security researcher Zeryus, has submitted on 16/06/2008 a cross-site-scripting XSS vulnerability affecting www.stokard.be, which at the time of submission ranked 17299709 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is current...

Unfixed XSS vulnerability at www.petsmart.com

Security researcher Rafal, has submitted on 14/06/2008 a cross-site-scripting XSS vulnerability affecting www.petsmart.com, which at the time of submission ranked 6119 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currently...

[SECURITY] [DSA 1595-1] New xorg-server packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1595-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 11, 2008 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.raisethehammer.org

Security researcher k a n u r, has submitted on 06/11/2008 a cross-site-scripting XSS vulnerability affecting www.raisethehammer.org, which at the time of submission ranked 741200 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It i...