Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.
References
No reference.
Configurations
Information
Published : 2000-01-10 05:00
Updated : 2008-09-05 20:20
NVD link : CVE-2000-0081
Mitre link : CVE-2000-0081
JSON object : View
Products Affected
microsoft
- hotmail
CWE
