exploitDog

CVE-2006-0254

Опубликовано: 15 янв. 2006

Источник: redhat

EPSS Средний

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=430646tomcat examples XSS

EPSS

Процентиль: 98%

0.32247

Средний

Связанные уязвимости

CVE-2006-0254

nvd

почти 21 год назад

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

CVE-2006-0254

debian

почти 21 год назад

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo ...

GHSA-2jxh-3cx8-xw65

github

больше 4 лет назад

Apache Geronimo console 1.0 vulnerable to cross-site scripting

EPSS

Процентиль: 98%

0.32247

Средний