Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个Web Browser UTF-7 跨域字符设置继承漏洞
Vulnerability Description
当一个charset没有在HTTP内容-形式头或元标识中被特定化时，Microsoft Internet Explorer 7中的子框架会继承来自母窗口的默认的charset，这使得远程攻击者可以执行跨站脚本攻击，比如通过使用UTF-7 character设置。
CVSS Information
N/A
Vulnerability Type
N/A