5 matches found
Marval MSM 操作系统命令注入漏洞
Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476, which stems from insecure handling of VBScript, resulting in vulnerability to operating system command injection...
CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...
IE VBScript Handling patch (Q318089)
Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files. Impact of vulnerability: Information Disclosure Affected Software: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 See...
MS02-009: IE VBScript Handling patch (318089)
The remote host is running a version of Internet Explorer that may allow an attacker to read local files on the remote host. To exploit this flaw, an attacker would need to lure a victim on the remote system into visiting a rogue website. C Tenable Network Security, Inc. include"compat.inc"; if...
Security Update, February 14, 2002 (Internet Explorer 5.01)
This is an updated version of Security Update, February 14, 2002. This update resolves the "Incorrect VBScript Handling can Allow Web Pages to Read Local Files" security vulnerability in Internet Explorer 5.01 and Windows 2000, and is discussed in Microsoft Security Bulletin MS02-009. Download no...