Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla FireFox OnKeyDown事件文件上传漏洞
Vulnerability Description
Mozilla FireFox是一款流行的开源WEB浏览器。 FireFox在处理文件上传时存在漏洞，恶意网站可能利用此漏洞获取用户系统上的文件。 Firefox没有正确地处理表单字段的焦点，允许攻击者通过OnKeyDown事件将焦点从textarea字段更改至file upload字段，如果用户访问了恶意站点并向textarea输入表单键入了文件名的话，就可能将系统上的任意文件上传到恶意站点。
CVSS Information
N/A
Vulnerability Type
N/A