Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
kde konqueror 3.1.3 |
||
kde konqueror 3.2.2 |