CVE-2006-6988

CVE-2006-6988 (Slim Browser 4.07 build 100) : Cross-domain information disclosure via an object tag with a data parameter referencing an attacker site. The attacker’s link specifies a Location header that references the target site, allowing content to be exposed through the object’s outerHTML at...