3123 matches found
Apache Struts 1.2.7 - Error Response Cross-Site Scripting
source: https://www.securityfocus.com/bid/15512/info Struts is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...
[Full-disclosure] Security Advisory: Struts Error Message Cross Site Scripting
Background ========== Struts is an open source framework for building web applications. The core of the Struts framework is a flexible control layer based on standard technologies such as Java Servlets, JavaBeans, resource bundles, and the Extensible Markup Language XML. Struts can be used with...
