750 matches found
CVE-2002-1348
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies...
CVE-2002-1348
CVE-2002-1348 affects w3m prior to 0.3.2.2, where HTML escaping in IMG ALT attributes is insufficient, potentially allowing remote attackers to access local files or cookies. Connected advisories (Debian DSA for w3m/w3mmee) confirm multiple Debian advisories addressing this vulnerability and indi...
RHEL 2.1 : w3m (RHSA-2003:045)
Updated W3M packages are available that fix two cross-site scripting issues. W3M is a pager with Web browsing capabilities. Two cross-site scripting XSS issues have been found in W3M. An XSS vulnerability in W3M 0.3.2 allows remote attackers to insert arbitrary HTML and Web script into frames...
CVE-2002-1348
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies...
CVE-2002-1348
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies...
DEBIAN-CVE-2002-1348
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies...
[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 251-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 251-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2003 http://www.debian.org/security/faq -...
DSA-251 w3m - missing HTML quoting
Bulletin has no description...
DSA-250 w3mmee-ssl - missing HTML quoting
Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send their local cookies...
w3m crossite scripting
No description provided...
DSA-249 w3mmee - missing HTML quoting
Bulletin has no description...
Moderate: Red Hat Security Advisory: : Updated w3m packages fix cross-site scripting issues
New w3m packages are available that fix two cross-site scripting issues. w3m is a pager with Web browsing capabilities. Two cross-site scripting XSS issues have been found in w3m. An XSS vulnerability in w3m 0.3.2 allows remote attackers to insert arbitrary HTML and web script into frames. Frames...
Important: Red Hat Security Advisory: w3m security update
Updated W3M packages are available that fix two cross-site scripting issues. W3M is a pager with Web browsing capabilities. Two cross-site scripting XSS issues have been found in W3M. An XSS vulnerability in W3M 0.3.2 allows remote attackers to insert arbitrary HTML and Web script into frames...
DEBIAN-CVE-2002-1335
Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...
CVE-2002-1335
Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...
CVE-2002-1335
Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...
CVE-2002-1335
CVE-2002-1335 affects w3m 0.3.2, where an HTML tag inside a frame is not escaped, enabling cross-site scripting. The vulnerability allows a remote attacker to run arbitrary scripts or access files and cookies by injecting HTML/script in the frame content. Documented impact is limited to partial i...
