CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Date published : 2005-04-18

http://www.securityfocus.com/bid/13231

http://www.mozilla.org/security/announce/mfsa2005-39.html