exploitDog

CVE-2006-1548

Опубликовано: 22 мар. 2006

Источник: redhat

Описание

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=430531struts LookupDispatchAction XSS

Связанные уязвимости

CVE-2006-1548

ubuntu

почти 20 лет назад

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.

CVE-2006-1548

nvd

почти 20 лет назад

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.

CVE-2006-1548

debian

почти 20 лет назад

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction a ...

GHSA-p3vw-fvwx-qcv5

CVSS3: 3.7

github

почти 4 года назад

Cross-site scripting in Apache Struts