exploitDog

CVE-2006-0254

Опубликовано: 15 янв. 2006

Источник: redhat

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=430646tomcat examples XSS

Связанные уязвимости

CVE-2006-0254

nvd

больше 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

CVE-2006-0254

debian

больше 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo ...

GHSA-2jxh-3cx8-xw65

github

больше 3 лет назад

Apache Geronimo console 1.0 vulnerable to cross-site scripting