CVE-2009-1714

Description

Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.

Related Vulnerabilities

platform vulnerability
CVE-2009-1714 webkit
CVE-2009-1714 qt4-x11
CVE-2009-1714 kde4libs
CVE-2009-1714