CVE-2010-2087

CVE-2010-2087: Oracle Mojarra 1.2_14 and 2.0.2 (as used in IBM WebSphere Application Server, Caucho Resin, and other apps) fails to properly protect an unencrypted view state. This enables remote attackers to perform cross-site scripting (XSS) or execute arbitrary Expression Language (EL) stateme...

CVE-2010-2032

Multiple cross-site scripting XSS vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 digestrealm or 2 digestusername parameters. NOTE: some of...

CVE-2010-2032

Multiple cross-site scripting XSS vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 digestrealm or 2 digestusername parameters. NOTE: some of...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 digestrealm or 2 digestusername parameters. NOTE: some of...

CVE-2010-2032

CVE-2010-2032 concerns multiple XSS flaws in Caucho Resin’s resin-admin/digest.php. Affected products include Resin Professional 3.1.5, 3.1.10, 4.0.6 (and potentially other versions). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the digest_realm or digest_...

CVE-2010-2032

Multiple cross-site scripting XSS vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 digestrealm or 2 digestusername parameters. NOTE: some of...

Resin resin-admin/digest.php XSS

The remote host is running Resin, an application server. The 'resin-admin/digest.php' script included with the version of Resin listening on the remote host fails to sanitize user input to the 'digestrealm' and/or 'digestusername' parameters before using it to generate dynamic HTML output. An...

Caucho Technology Resin digest.php Cross Site Scripting Vulnerability

This vulnerability do not need to login.digest.php use the REQUEST method in a wrong way to accept parametersthe malicious user could submit xss code on this page and an attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. exp:...

Caucho Resin Web Server 3.1.2 Cross Site Scripting

hi,brother,I want to post a vul of Caucho Resin web server Exploit Title:Caucho Resin web server 3.1.2 Admin Login digestusername&digestrealm XSS Vulnerability Date: 2010-05-17 Author: flyh4t Software Link: http://www.caucho.com/ Version: Professional 3.1.2 CVE : no P0C:no need of login POST...

Caucho Resin Professional 3.1.5 - resin-admindigest.php Multiple Cross-Site Scripting Vulnerabilities

Caucho Resin Professional 3.1.5 - resin-admindigest.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40251/info Caucho Resin Professional is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize...

Caucho Resin Professional 3.1.5 - '/resin-admin/digest.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40251/info Caucho Resin Professional is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of...

resin 设备名路径泄漏漏洞

No description provided by source...

resin 1.2 目录遍历漏洞

Caucho Technology Resin 1.2.2存在一个安全问题。远程用户可以获取http根 目录之外的文件的读取权限。通过构造一个特别的包含'/..'或者'/...'的URL, 可能导致目录遍历。 此问题只影响在Windows NT/2000系统中安装的Resin. 测试方法： joetesta （[email protected]提供了如下演示代码： http://localhost:8080/../readme.txt 建议： 厂商补丁： Caucho Technology已经提供了Resin 1.2.3，此版本已经解决了此安全问题。 下载地址：...

resin 3.0.18 viewfile代码泄漏漏洞

No description provided by source...

resin 3.1.1 跨站脚本漏洞

No description provided by source...

resin 3.1 多个代码泄露漏洞

No description provided by source...

Resin 3.0.18 Windows远程目录遍历漏洞

No description provided by source...

CVE-2008-2462

Cross-site scripting XSS vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter...

CVE-2008-2462

CVE-2008-2462 concerns a cross-site scripting (XSS) vulnerability in Resin’s viewfile command. The issue allows remote attackers to inject arbitrary web script or HTML via the file parameter. Affected Resin versions are before 3.0.25 and 3.1.x before 3.1.4; remediation is to upgrade to Resin 3.0....