Jetty multiple security vulnerabilities

Crossite scripting, information leak...

jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection

jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor...

jetty 6.x - 7.x xss information disclosure injection

No description provided by source. Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

jetty 6.x < 7.x - Cross-Site Scripting / Information Disclosure / Injection

Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

Jetty 6.x / 7.x Information Disclosure / XSS

Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

jetty 6.x - 7.x xss, information disclosure, injection

Exploit for jsp platform in category web applications ====================================================== jetty 6.x - 7.x xss, information disclosure, injection ====================================================== Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in...

Jetty 6.x and 7.x Multiple Vulnerabilities

Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37927/info Jetty is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37927/info Jetty is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Jetty 'CookieDump.java' Cross-Site Scripting Vulnerability

Jetty WebServer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mort Bay / Eclipse Jetty Detection (HTTP)

HTTP based detection of Mort Bay / Eclipse Jetty. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

CVE-2009-3579 affects Mort Bay Jetty (CookieDump.java sample app) with Jetty 6.1.19/6.1.20. The CookieDump.java code accepts user input for the Name/Value GET parameters to /cookie and uses it to generate dynamic HTML output without sanitization, enabling a remote attacker to inject arbitrary HTM...

CORE-2009-0922: Jetty Persistent XSS in Sample Cookies Application

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Jetty Persistent XSS in Sample Cookies Application 1. Advisory Information Title: Jetty Persistent XSS in Sample Cookies Application Advisory Id: CORE-2009-0922...

Jetty Persistent XSS in Sample Cookies Application

Advisory ID Internal CORE-2009-0922 1. Advisory Information Title: Jetty Persistent XSS in Sample Cookies Application Advisory Id: CORE-2009-0922 Date published: 2009-10-06 Date of last update: 2009-10-06 Vendors contacted: Jetty Team Release mode: Coordinated release 2. Vulnerability Information...

Fedora Core 10 FEDORA-2009-5513 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5513. OpenVAS Vulnerability Test $Id: fcore20095513.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5513 jetty Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-5513 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5513. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...