| Package | Affected versions | Patched versions |
|---|---|---|
| konqueror | = 2.2.2= 3.0= 3.0.1= 3.0.2= 3.0.3 |
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free