Security Advisory
CVE-2005-1158
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.