5 matches found
CVE-2012-3373
Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...
CVE-2012-3373
Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...
CVE-2012-3373
Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...
CVE-2012-3373: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...
PT-2012-4670
Name of the Vulnerable Software and Affected Versions Apache Wicket versions 1.4.x through 1.4.20 Apache Wicket versions 1.5.x through 1.5.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax...