7 lines
No EOL
544 B
Text
7 lines
No EOL
544 B
Text
source: http://www.securityfocus.com/bid/22966/info
|
|
|
|
Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.
|
|
|
|
An attacker can exploit this issue to spoof the contents of the Navigation canceled page, steal cookie-based authentication credentials, and obtain other sensitive information. Successful exploits may assist in phishing or other attacks that rely on content spoofing.
|
|
|
|
res://ieframe.dll/navcancl.htm#http://www.example.com/[script] |