Skip to content
OpenAdvisories

Archive

November 2005

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —
    CVE-2005-3747 Public exploit

    Mortbay Jetty Discloses JSP Source Code

    Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.

  • Medium —
    CVE-2005-3745 Public exploit EPSS 26%

    Apache Struts Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an er…