mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
e9a692de92
Thirty of thirty sampled returned 404: the service is gone, so all 942 links across 911 entries are permanently dead. 576 entries held nothing else and drop out of the search index rather than offering a reader a guaranteed miss.
861 B
861 B
CVE-2007-5960
Description
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.