exploitDog

CVE-2006-0254

Опубликовано: 15 янв. 2006

Источник: redhat

EPSS Средний

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=430646tomcat examples XSS

EPSS

Процентиль: 98%

0.45321

Средний

Связанные уязвимости

CVE-2006-0254

nvd

около 20 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

CVE-2006-0254

debian

около 20 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo ...

GHSA-2jxh-3cx8-xw65

github

почти 4 года назад

Apache Geronimo console 1.0 vulnerable to cross-site scripting

EPSS

Процентиль: 98%

0.45321

Средний