CVE-2007-5799

CVE-2007-5799 involves multiple cross-site request forgery (CSRF) flaws in the uddigui/navigateTree.do component of IBM WebSphere Application Server’s UDDI user console. The issue allows unauthenticated or remote attackers to perform actions on behalf of UDDI users via the keyField, nameField, va...

CVE-2006-5799

Multiple cross-site scripting XSS vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the 1 contid or 2 search parameters...

CVE-2006-5799

CVE-2006-5799 involves multiple XSS vulnerabilities in the xenis.creator CMS, specifically in default.asp where the (1) contid and (2) search parameters can be exploited to inject arbitrary web script/HTML. Documented impact is partial confidentiality/integrity/availability, with a NVD CVSS v2 ba...