496 matches found
CVE-2007-5121
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
CVE-2007-5120
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
CVE-2007-5120
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
CVE-2007-5119
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
Design/Logic Flaw
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
CVE-2007-5120
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
CVE-2007-5120
JSPWiki 2.4.103 and 2.5.139-beta contain multiple XSS vulnerabilities. The flaws affect various JSPWiki pages and parameters: NewGroup.jsp (group, members), Edit.jsp (edittime), Comment.jsp (edittime, author, link), UserPreferences.jsp and Login.jsp (loginname, wikiname, fullname, email), Diff.js...
CVE-2007-5119
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
CVE-2007-5119
JSPWiki is affected: versions 2.4.103 and 2.5.139-beta expose the full path via an invalid integer in the version parameter to the default URI under attach/Main/. Root cause: improper handling of the version parameter leads to information disclosure. Impact is information disclosure (full path). ...
CVE-2007-5121
The CVE-2007-5121 issue affects JSPWiki 2.5.139-beta, where an XSS vulnerability exists in the redirect parameter to wiki-3/Login.jsp and other components. The underlying cause is improper handling of user-supplied input enabling arbitrary script/HTML injection. Impact is possible client-side scr...
CVE-2007-5121
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
CVE-2007-5119: Improper Input Validation
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
CVE-2007-5121: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
CVE-2007-5120: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
jspwiki-xss.txt
Application: JSPWiki Multiple Vulnerabilities Version: 2.4.103 and 2.5.139 Credit: Jason Kratzer Date: 9/24/2007 Background ------------------------------------------------------------ JSPWiki is wiki software built around the standard J2EE components of Java, servlets and JSP. It was written by...
JSPWiki Multiple Vulnerabilities
Application: JSPWiki Multiple Vulnerabilities Version: 2.4.103 and 2.5.139 Credit: Jason Kratzer Date: 9/24/2007 Background ------------------------------------------------------------ JSPWiki is wiki software built around the standard J2EE components of Java, servlets and JSP. It was written by...
JSPWiki 2.5.139 - NewGroup.jsp Multiple Cross-Site Scripting Vulnerabilities
JSPWiki 2.5.139 - NewGroup.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fail...
JSPWiki 2.5.139 - edit.jsp?edittime Cross-Site Scripting
JSPWiki 2.5.139 - edit.jsp?edittime Cross-Site Scripting source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately...
JSPWiki 2.5.139 - Login.jsp Multiple Cross-Site Scripting Vulnerabilities
JSPWiki 2.5.139 - Login.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails t...
JSPWiki 2.5.139 - Diff.jsp Multiple Cross-Site Scripting Vulnerabilities
JSPWiki 2.5.139 - Diff.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to...