NetSight
IP …
high7.5

CVE-2002-1151

The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, wh…

Impact

The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.

Affected products

VendorProductAffected versions
KdeKonqueror
Versions 2.2.2, 3.0, 3.0.1, 3.0.2, 3.0.3
KdeKde
Versions 2.2.2, 3.0, 3.0.1, 3.0.2, 3.0.3

References