eDvice Security Services

3 exploits Active since Aug 2001
CVE-2001-0519 EXPLOITDB text WORKING POC
Aladdin eSafe Gateway 2.x - Cross-Site Scripting via Nested SCRIPT Tags
Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags.
CVE-2001-0521 EXPLOITDB text WRITEUP
Aladdin eSafe Gateway 3.0 and earlier - Cross-Site Scripting via Unicode-Encoded SCRIPT Tags
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document.
CVE-2001-0520 EXPLOITDB html WRITEUP
Aladdin eSafe Gateway 3.0 and earlier - Cross-Site Scripting via HTML Tag Attribute Injection
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined.