27 matches found
CVE-2018-12432
JavaMelody through 1.60.0 has XSS via the counter parameter in a clearcounter action to the /monitoring URI...
CVE-2018-12432
JavaMelody through 1.60.0 has XSS via the counter parameter in a clearcounter action to the /monitoring URI...
CVE-2018-12432
JavaMelody up to version 1.60.0 is vulnerable to XSS via the counter parameter in the clear_counter action at the /monitoring URI. The root cause is unsanitized input in the counter parameter, enabling attacker-controlled script injection. Documented affected component: javamelody-core (JavaMelod...
CVE-2018-12432
JavaMelody through 1.60.0 has XSS via the counter parameter in a clearcounter action to the /monitoring URI...
CVE-2013-4378
Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...
CVE-2013-4378
CVE-2013-4378 describes a cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java of JavaMelody 1.46 and earlier. The underlying issue is injection of arbitrary web script or HTML via a crafted X-Forwarded-For header, enabling an attacker to influence pages rendered to othe...
CVE-2013-4378
Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...