CVE-2004-1160

Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.

• http://secunia.com/advisories/13402/
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test/Exploit, Vendor Advisory
• http://secunia.com/secunia_research/2004-13/advisory/
• http://www.securityfocus.com/bid/11852Exploit, Vendor Advisory
• http://secunia.com/advisories/13402/
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test/Exploit, Vendor Advisory
• http://secunia.com/secunia_research/2004-13/advisory/
• http://www.securityfocus.com/bid/11852Exploit, Vendor Advisory

Published

Jan 10, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1154Integer overflow in the Samba daemon (smbd) in Samba 2.x and…
• CVE-2004-1155Internet Explorer 5.01 through 6 allows remote attackers to …
• CVE-2004-1156Mozilla before 1.7.6, and Firefox before 1.0.1, allows remot…
• CVE-2004-1157Opera 7.x up to 7.54, and possibly other versions, allows re…
• CVE-2004-1158Konqueror 3.x up to 3.2.2-6, and possibly other versions, al…
• CVE-2004-1159Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-1161rssh 2.2.2 and earlier does not properly restrict programs t…
• CVE-2004-1162The unison command in scponly before 4.0 does not properly r…
• CVE-2004-1163Cisco CNS Network Registrar Central Configuration Management…
• CVE-2004-1164The lock manager in Cisco CNS Network Registrar 6.0 through …
• CVE-2004-1165Konqueror 3.3.1 allows remote attackers to execute arbitrary…
• CVE-2004-1166CRLF injection vulnerability in Microsoft Internet Explorer …