306 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the 1 q and 2 luceneindexfieldvalue parameters. NOTE: the provenance of this information is unknown; the details are...
Issues not shown in issue navigator that a user has permission for according to the issue security level
Users may not be able to see certain issues in the IssueNavigator, if they create an issue level security, where the permission depends on a user custom field where the customfield does not have a searcher set. Browsing the issue directly, works fine, however when running a search the issue wont ...
Issues not shown in issue navigator that a user has permission for according to the issue security level
Users may not be able to see certain issues in the IssueNavigator, if they create an issue level security, where the permission depends on a user custom field where the customfield does not have a searcher set. Browsing the issue directly, works fine, however when running a search the issue wont ...
Issues not shown in issue navigator that a user has permission for according to the issue security level
Users may not be able to see certain issues in the IssueNavigator, if they create an issue level security, where the permission depends on a user custom field where the customfield does not have a searcher set. Browsing the issue directly, works fine, however when running a search the issue wont ...
Apache Jakarta Lucene results.jsp XSS
The remote host is using Apache Jakarta Lucene, a full-featured text search engine library implemented in Java. There is a cross-site scripting vulnerability in the script 'results.jsp' that may allow an attacker to steal the cookies of legitimate users on the remote host. %NASLMINLEVEL 70300 Thi...
[SA13360] Jakarta Lucene "results.jsp" Cross-Site Scripting Vulnerability
TITLE: Jakarta Lucene "results.jsp" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13360 VERIFY ADVISORY: http://secunia.com/advisories/13360/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jakarta Lucene 1.x http://secunia.com/product/4352/...