Skip to content
OpenAdvisories

Archive

30 September 2013

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2013-4378 Public exploit

    Improper Neutralization of Input During Web Page Generation in JavaMelody

    Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.