Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.03 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome, as demonstrated via the runFile function, related to lack of HTML escaping in the property name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FireBug跨站脚本执行漏洞
Vulnerability Description
FireBug是一个非常实用的JavaScript以及DOM查看调试工具，是Firefox的一个插件。 FireBug的对脚本代码的处理实现上存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行恶意脚本代码。 在浏览器中远程脚本是受到沙盒限制的，也就是任何http:或https:前缀的URL都是安全的。浏览器扩展使用chrome: protocol，这个协议不受任何限制，因此浏览器扩展都是受信任的。如果远程脚本诱骗浏览器对chrome:执行JavaScript表达式的话，这个脚本就可以完全控制整个chrom
CVSS Information
N/A
Vulnerability Type
N/A