Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Netscape/Mozilla 空字符插入URL中窃取Cookies漏洞
Vulnerability Description
Mozilla是种公开发放、免费使用、开放源码的WEB浏览器,可运行于绝大多数Unix/Linux系统上,也可运行在MacOS和微软Windows 9x/ME/NT/2000/XP上。Netscape类似Mozilla,也是一种这样的WEB浏览器。 Cookies常常被WEB站点用来验证用户身份,如果攻击者可以窃取某用户的cookies,就可以假扮该用户访问相应的WEB站点。Mozilla和Netscape都存在这样的安全漏洞。 比如在受影响的浏览器中加载如下URL http://alive.znep.c
CVSS Information
N/A
Vulnerability Type
N/A