Design/Logic Flaw

Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as...

CVE-2009-1597

Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as...

CVE-2009-1600

Apple Safari (PDF JavaScript security) is reported to execute DOM calls triggered by a javascript: URI in the target attribute of a form submit within an inline PDF, potentially bypassing Adobe Acrobat JavaScript restrictions on accessing the document object. This could enable remote attackers to...

CVE-2009-1597

Summary : CVE-2009-1597 affects Mozilla Firefox. What’s affected : Firefox’s handling of a javascript: URI in the target attribute of a submit element within a form embedded in a PDF, potentially bypassing Adobe Acrobat JavaScript restrictions. Root cause / vector : DOM calls triggered by the jav...

CVE-2009-1598

Google Chrome

CVE-2009-1599

Summary: CVE-2009-1599 concerns a PDF-related JavaScript security bypass in Opera. The vulnerability arises when a javascript: URI is executed from the target attribute of a submit button inside a form contained in an inline PDF, potentially bypassing Adobe Acrobat JavaScript restrictions on acce...

Mozilla Firefox 3.0.10 SeaMonkey 1.1.16 - Address Bar URI Spoofing

Mozilla Firefox 3.0.10 SeaMonkey 1.1.16 - Address Bar URI Spoofing source: https://www.securityfocus.com/bid/35388/info Mozilla Firefox and SeaMonkey are affected by a URI-spoofing vulnerability because they fail to adequately handle user-supplied data. An attacker may leverage this issue by...

Mozilla Firefox 3.0.10 / SeaMonkey 1.1.16 - Address Bar URI Spoofing

source: https://www.securityfocus.com/bid/35388/info Mozilla Firefox and SeaMonkey are affected by a URI-spoofing vulnerability because they fail to adequately handle user-supplied data. An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting...

Project Woodstock 404 Error Page UTF-7 Encoded XSS

The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...

CVE-2009-1523

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI...

GlassFish Enterprise Server 2.1 - Admin Console webServicewebServicesGeneral.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console webServicewebServicesGeneral.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

Mini-Stream Multiple Products Buffer Overflow Vulnerability

This host has Mini-Stream products installed and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodministreammultprdtsbofapr09.nasl 5364 2017-02-20 13:26:07Z cfi $ Mini-Stream Multiple Products Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright ...

Invision Power Board (IP.Board) 3.0 - Multiple HTML Injection Information Disclosure Vulnerabilities

Invision Power Board IP.Board 3.0 - Multiple HTML Injection Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/34725/info Invision Power Board is prone to an information-disclosure issue and multiple HTML-injection vulnerabilities because it fails to properly sanitiz...

Sql injection

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI...

CVE-2008-6748

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI...

Google Chrome < 1.0.154.59 ChromeHTML URI Handling Privilege Escalation

The version of Google Chrome installed on the remote host is earlier than 1.0.154.59. Such versions are reportedly affected by an issue when handling URLs with a 'chromehtml:' protocol that could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk. If...

Mozilla Foundation Security Advisory 2009-22

Mozilla Foundation Security Advisory 2009-22 Title: Firefox allows Refresh header to redirect to javascript: URIs Impact: Moderate Announced: April 21, 2009 Reporter: Michael Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.9 Description Mozilla community member Michael reported that when a...