← Database

CVE-2005-2264

HIGH CVSS: 7.5 Published: 2005-07-13 Modified: 2026-06-16

Description

Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-Other

References