9 April 2009

5 results · Clear filters · Feed

• Medium —
  CVE-2008-6682

  Apache Struts is vulnerable to Cross-site Scripting

  Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in…

  org.apache.struts:struts2-core Maven
  Apr 9, 2009
• Medium —
  CVE-2008-6681

  Cross-Site Scripting in dojo

  Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

  dojo npm
  Apr 9, 2009
• Medium —
  CVE-2008-2025

  Apache Struts Cross-site Scripting vulnerability

  Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remo…

  struts:struts Maven
  Apr 9, 2009
• Medium —
  CVE-2009-1275

  Apache Tiles Vulnerable to XSS via EL Expression Injection

  Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive informat…

  org.apache.tiles:tiles-core tiles Debian Maven
  Apr 9, 2009
• Medium —
  CVE-2007-6726

  Apache Struts Dojo Plugin XSS Vulnerability

  Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.ht…

  org.apache.struts:struts2-dojo-plugin Maven
  Apr 9, 2009