الباحثون
رجوع
Sebastian Cufre
باحث من
Core Security Technologies
#19456
من 60,450
15.9
إجمالي CVSS
الثغرات
·
3
منخفضة
1
متوسطة
1
عالية
1
PT-2006-5445
2006-09-09
5.8
CVE-2006-4660
Aol
Aol Icq Toolbar
The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module. These vulnerabilities allow remote attackers to execute arbitrary web script or HTML within the Feeds interface context. The attack can be carried out via the `title` and `description` elements within an `item` element in an RSS feed.
PT-2006-5446
2006-09-09
2.6
CVE-2006-4661
Aol
Aol Icq Toolbar
The issue arises from improper validation of the origin of the configuration web page, specifically options2.html, which can be exploited by remote attackers to trick users into reconfiguring the toolbar by presenting disguised checkboxes.
PT-2006-5447
2006-09-09
7.5
CVE-2006-4662
Aol
Aol Icq Pro
The issue is related to a heap-based buffer overflow in the MCRegEx Search function. This allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.