183
Explorer and Firefox), this attribute can prevent the user's session cookie from being accessible
to malicious client-side scripts that use document.cookie. This is not a complete solution, since
HttpOnly is not supported by all browsers. More importantly, XMLHTTPRequest and other
powerful browser technologies provide read access to HTTP headers, including the Set-Cookie
header in which the HttpOnly flag is set.
Effectiveness = Defense in Depth
Observed Examples
Reference Description
CVE-2006-3211 Stored XSS in a guestbook application using a javascript: URI in a bbcode img
tag.
https://www.cve.org/CVERecord?id=CVE-2006-3211
CVE-2002-1649 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1649
CVE-2002-1803 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1803
CVE-2002-1804 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1804
CVE-2002-1805 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1805
CVE-2002-1806 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1806
CVE-2002-1807 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1807
CVE-2002-1808 javascript URI scheme in IMG tag.
https://www.cve.org/CVERecord?id=CVE-2002-1808
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Script in IMG tags
Software Fault Patterns SFP24 Tainted input to command
CWE-83: Improper Neutralization of Script in Attributes in a Web Page
Weakness ID : 83
Structure : Simple
Abstraction : Variant
Description
The product does not neutralize or incorrectly neutralizes "javascript:" or other URIs from
dangerous attributes within tags, such as onmouseover, onload, onerror, or style.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
CWE Version 4.14
CWE-83: Improper Neutralization of Script in Attributes in a Web Page
CWE-83: Improper Neutralization of Script in Attributes in a Web Page