CVE-2004-1160

CVE-2004-1160 is a "window injection" vulnerability affecting Netscape Navigator versions 7.x to 7.2, allowing remote attackers to spoof websites. An attacker can inject content from one window into a target window in a different domain, even if only the target window's name is known, often demonstrated via pop-up windows on trusted sites. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with no authentication, potentially leading to information disclosure, integrity compromise, and denial of service. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, indicating continued interest.