5971 matches found
Opera 6.0.x - FTP View Cross-Site Scripting
source: https://www.securityfocus.com/bid/5401/info A cross-site scripting vulnerability in Opera has been reported. When viewing the contents of an FTP site as web content, the data within tags is not sanitized. An attacker may embed javascript between open and closing tags in a FTP URL. This...
CVE-2002-0535
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via 1 an IMG tag when BBCode is enabled, or 2 in a topic title...
CVE-2002-0535
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via 1 an IMG tag when BBCode is enabled, or 2 in a topic title...
CVE-2002-0535
CVE-2002-0535 covers cross-site scripting in PostBoard 2.0.1 and earlier. The vulnerability enables remote attackers to execute script in the context of other users via (1) an IMG tag when BBCode is enabled, or (2) in a topic title. Documents confirm affected software/version and the underlying a...
Возможное переполнение буфера в XFree86 (buffer overflow)
Возможно переполнение буфера при длинном заголовке окна...
CVE-2001-1027
Buffer overflow in WindowMaker aka wmaker 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title...
Дырка в PHP-Nuke (xml parsing)
При разборе XML не проверяется таг TITLE, что позволяет вставить в него PHP-скрипт...
netscape.title.tag.about.txt
Date: Mon, 24 May 1999 14:24:13 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator JavaScript in security vulnerability There is a security bug in Netscape Communicator 4.6 Win95, 4.07 Linux guess all 4.x versions are affected in the way they treat JavaScript code...
PT-1999-1333 · Netscape · Netscape Communicator
Name of the Vulnerable Software and Affected Versions: Netscape Communicator affected versions not specified Description: The issue allows a remote attacker to gain access to browser information when Javascript is embedded within the TITLE tag, utilizing the "about" protocol. Recommendations: At...
