2549 matches found
Struts2/XWork < 2.2.0 Remote Command Execution Vulnerability
No description provided by source. Friday, July 9, 2010 CVE-2010-1870: Struts2/XWork remote command execution Update Tue Jul 13 2010: Added proof of concept Apache Struts team has announced uploaded but has not released, due to an unreasonably prolonged voting process, the 2.2.0 release of the...
Struts2/XWork < 2.2.0 Remote Command Execution Vulnerability
Exploit for multiple platform in category remote exploits ============================================================ Struts2/XWork 2.2.0 Remote Command Execution Vulnerability ============================================================ Apache Struts team has announced uploaded but has not...
Struts2XWork 2.2.0 - Remote Command Execution
Struts2XWork 2.2.0 - Remote Command Execution Friday, July 9, 2010 CVE-2010-1870: Struts2/XWork remote command execution Update Tue Jul 13 2010: Added proof of concept Apache Struts team has announced uploaded but has not released, due to an unreasonably prolonged voting process, the 2.2.0 releas...
Struts2/XWork < 2.2.0 - Remote Command Execution
Friday, July 9, 2010 CVE-2010-1870: Struts2/XWork remote command execution Update Tue Jul 13 2010: Added proof of concept Apache Struts team has announced uploaded but has not released, due to an unreasonably prolonged voting process, the 2.2.0 release of the Struts2 web framework which fixes...
openSUSE Security Update : struts (struts-1530)
This update of struts fixes a regression caused by the last security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update struts-1530. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : struts (struts-1530)
This update of struts fixes a regression caused by the last security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update struts-1530. The text description of this plugin is C SUSE LLC...
SLES10: Security update for Java Struts
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: struts struts-javadoc struts-manual struts-webapps-tomcat5 More details may also be found by searching for the SuSE Enterprise Server 10 patch database locat...
SLES10: Security update for Java Struts
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: struts struts-javadoc struts-manual struts-webapps-tomcat5 More details may also be found by searching for the SuSE Enterprise Server 10 patch database linke...
Apache Struts Classes Directory Traversal (CVE-2008-6505)
Apache Struts is a Java-based web application development framework. Unlike JSP and Servelets, Struts encourage good application design by enforcing MVC Model-View-Controller architecture for separation of concerns like business logic Model from web-page design View and navigational code...
SuSE 10 Security Update : Java Struts (ZYPP Patch Number 6122)
Insufficient quoting of parameters allowed attackers to conduct cross-site scripting XSS attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41590;...
openSUSE Security Update : struts (struts-371)
Insufficient quoting of parameters allowed attackers to conduct cross site scripting XSS attacks CVE-2008-2025. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update struts-371. The text description...
openSUSE Security Update : struts (struts-371)
Insufficient quoting of parameters allowed attackers to conduct cross site scripting XSS attacks CVE-2008-2025. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update struts-371. The text description...
Apache Struts 2 s:a / s:url Tag href Element XSS
The web application on the remote host is affected by a cross-site scripting vulnerability due to a vulnerable version of Apache Struts 2 that fails to properly encode the parameters in the 's:a' and 's:url' tags. A remote attacker can exploit this by tricking a user into requesting a page with...
Apache Struts Cross Site Scripting Vulnerability
This host is running Apache Struts and is prone to Cross Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbapachestrutsxssvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Apache Struts Cross Site Scripting Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...
Apache Struts Security Update (S2-002, S2-003)
Apache Struts is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Apache Struts Security Update (S2-004) - Active Check
Apache Struts is prone to a directory traversal vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
Apache Struts Detection (HTTP)
HTTP based detection of Apache Struts. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...
CVE-2007-6726
Multiple cross-site scripting XSS vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 xipclient.html and 2 xipserver.html in src/io/...
CVE-2008-2025
Cross-site scripting XSS vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise SLE 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web scrip...
CVE-2008-6682
Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of 1 " double quote characters in the href attribute of an s:a tag and 2...