Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
itytracker.com/id?1018092 - http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html - http://secunia.com/advisories/28114 - https://issues.rpath.com/browse/RPL-1318 - http://secunia.com/advisories/25012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5960 - http://www.ubuntu.com/usn/usn-467-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 - http://secunia.com/advisories/25346 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:108 - http://secunia.com/advisories/25111 - http://www.vupen.com/english/advisories/2007/4241 - http://secunia.com/advisories/25239 - http://secunia.com/advisories/25167
CVE ID: CVE-2007-2357 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34172 - http://secunia.com/advisories/25014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33919 - http://www.securityfocus.com/bid/23682 - http://securityreason.com/securityalert/2649 - http://www.securityfocus.com/archive/1/466965/100/0/threaded - http://www.vupen.com
urityreason.com/securityalert/2649 - http://www.securityfocus.com/archive/1/466965/100/0/threaded - http://www.vupen.com/english/advisories/2007/1559
CVE ID: CVE-2007-2358 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in b2evolution allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_path parameter to (a) a_noskin.php, (b) a_stub.php, (c) admin.php, (d) contact.php, (e) default.php, (f) index.php, and (g) multiblogs.php in blogs/; the (2) view_path and (3) control_path parameters to blogs/admin.php; and the (4) skins_path parameter to (h) blogs/contact.php and (i) blogs/multiblogs.php. NOTE: this issue is disputed by CVE, since the inc_path, view_path, control_path
ntact.php and (i) blogs/multiblogs.php. NOTE: this issue is disputed by CVE, since the inc_path, view_path, control_path, and skins_path variables are all initialized in conf/_advanced.php before they are used Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-April/001566.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33907 - http://osvdb.org/35609 - http://www.securityfocus.com/archive/1/466886/100/0/threaded - http://www.osvdb.org/34152
CVE ID: CVE-2007-2359 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017971 - http://www.vupen.com/english/advisories/2007/1552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33931 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=519 - http://www
mcloud.com/vulnerabilities/33931 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=519 - http://www.symantec.com/avcenter/security/Content/2007.04.26.html - http://secunia.com/advisories/25013
CVE ID: CVE-2007-2360 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017971 - http://www.vupen.com/english/advisories/2007/1552 - http://labs.idefense.com/intelligence/vuln
ytracker.com/id?1017971 - http://www.vupen.com/english/advisories/2007/1552 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=520 - http://www.symantec.com/avcenter/security/Content/2007.04.26.html - http://secunia.com/advisories/25013
CVE ID: CVE-2007-2361 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017971 - http://www.vupen.com/english/advisories/2007/1552 - http://labs.idefense.com/in
p://www.securitytracker.com/id?1017971 - http://www.vupen.com/english/advisories/2007/1552 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33929 - http://www.symantec.com/avcenter/security/Content/2007.04.26.html - http://secunia.com/advisories/25013
CVE ID: CVE-2007-2362 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33933 - http://osvdb.org/35439 - http://lists.
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33933 - http://osvdb.org/35439 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html - http://securityreason.com/securityalert/2658 - http://www.securityfocus.com/bid/23694 - http://www.debian.org/security/2007/dsa-1434 - http://secunia.com/advisories/25007 - http://www.vupen.com/english/advisories/2007/1561 - http://www.digit-labs.org/files/exploits/mydns-rr-smash.c - http://osvdb.org/35438 - http://secunia.com/advisories/28086 - http://www.digit-labs.org/files/patches/mydns-update.c.diff
CVE ID: CVE-2007-2363 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted .IFF file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35463 - http://www.securityfocus.com/bid/23692 - https://www.exploit-db.com/exploits/3811 - http://secunia.com/advisories/25052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33946 - http://www.vupen.com/english/advisories/2007/1575
CVE ID: CVE-2007-2364 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) mysql.class.php or (2) postgres.class.php in lib/db/; or (3) authuser.php, (4) misc.php, or (5) connect.php in lib/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3809 - http://osvdb.org/35617 - http://www.securityfocus.com/bid/23691 - http://www.vupen.com/english/advisories/2007/1557 - https://exchange.xf
35617 - http://www.securityfocus.com/bid/23691 - http://www.vupen.com/english/advisories/2007/1557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33938
CVE ID: CVE-2007-2365 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38063 - http://securitytracker.com/id?1018792 - http://osvdb.org/35465 - http://www.vupen.com/english/advisories/2007/3442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33956 - http://secunia.com/advisories/26864 - http://secunia.com/advisories/26846
ge.xforce.ibmcloud.com/vulnerabilities/33956 - http://secunia.com/advisories/26864 - http://secunia.com/advisories/26846 - http://www.adobe.com/support/security/bulletins/apsb07-17.html - http://www.adobe.com/support/security/bulletins/apsb07-13.html - http://www.vupen.com/english/advisories/2007/3443 - https://www.exploit-db.com/exploits/3812 - http://www.securityfocus.com/bid/23698 - http://secunia.com/advisories/25044 - http://www.adobe.com/support/security/bulletins/apsb07-16.html - http://www.vupen.com/english/advisories/2007/1577
CVE ID: CVE-2007-2366 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33956 - http://secunia.com/advisories/25034 - https://www.exploit-db.com/exploits/3812 - http://www.securityfocus.com/bid/23698 - http://osvdb.org/35467
CVE ID: CVE-2007-2367 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2647 - http://www.securityfocus.com/bid/23341 - http://www.securityfocus.com/archive/1/464819/100/0/threaded
CVE ID: CVE-2007-2368 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1274 - https://www.exploit-db.com/exploits/3673
CVE ID: CVE-2007-2369 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34638 - http://www.vupen.com/english/advisories/2007/1274 - https://www.exploit-db.com/exploits/3673
CVE ID: CVE-2007-2370 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3672 - http://www.attrition.org/pipermail/vim/2007-April/001494.html
CVE ID: CVE-2007-2371 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login, which allows remote attackers to cause a denial of service (loss of configuration data), and possibly perform direct static code injection, via a saveGlobalconfig action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23342 - https://www.exploit-db.com/exploits/3671
CVE ID: CVE-2007-2372 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit when administrative credentials are missing, which allows remote attackers to compose an e-mail message via a post with the subject, message, format, and list_id fields; and send the message via a direct request for the MsgId value under admin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23342 - https://www.exploit-db.com/exploits/3671
CVE ID: CVE-2007-2373 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3670 - http://packetstormsecurity.org/0704-exploits/xoopswflinks-sql.txt - http://www.securityfocus.com/bid/23340 - http://www.securityfocus.com/archive/1/488375/100/0/threaded - http://www.securityfocus.com/archive/1/488316/100/0/threaded - http:
securityfocus.com/archive/1/488375/100/0/threaded - http://www.securityfocus.com/archive/1/488316/100/0/threaded - http://www.vupen.com/english/advisories/2007/1275
CVE ID: CVE-2007-2374 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34444 - http://research.eeye.com/html/advisories/upcoming/20070327.html - http://www.sec
ce.ibmcloud.com/vulnerabilities/34444 - http://research.eeye.com/html/advisories/upcoming/20070327.html - http://www.securityfocus.com/bid/23332
CVE ID: CVE-2007-2375 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23287 - http://www.securitytracker.com/id?1017881 - http://www.vupen.com/english/advisories/2007/1277 - http://www.symantec.com/avcenter/security/Content/2007.04.05d.html - http:
/www.vupen.com/english/advisories/2007/1277 - http://www.symantec.com/avcenter/security/Content/2007.04.05d.html - http://secunia.com/advisories/24767
CVE ID: CVE-2007-2376 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dojo framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43323
CVE ID: CVE-2007-2377 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Getahead Direct Web Remoting (DWR) framework 1.1.4 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvd
Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43322 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
CVE ID: CVE-2007-2378 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google Web Toolkit (GWT) framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43321
CVE ID: CVE-2007-2379 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:29.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43320 - https://security.net
ww.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43320 - https://security.netapp.com/advisory/ntap-20190416-0007/
CVE ID: CVE-2007-2380 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Atlas framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43325
CVE ID: CVE-2007-2381 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MochiKit framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43326
CVE ID: CVE-2007-2382 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Moo.fx framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43327
CVE ID: CVE-2007-2383 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37677 - http://www.fortifysoftware.com/servlet/downloads/public/
Container: References: - http://secunia.com/advisories/37677 - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://www.debian.org/security/2009/dsa-1952 - http://prototypejs.org/2007/4/24/release-candidate-3 - http://dev.rubyonrails.org/ticket/7910
CVE ID: CVE-2007-2384 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Script.aculo.us framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43319
CVE ID: CVE-2007-2385 State: PUBLISHED Published: 2007-04-30T23:00:00 Last Updated: 2024-08-07T13:33:28.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yahoo! UI framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf - http://osvdb.org/43324