CVE-2011-1077

Apache Archiva is affected by multiple cross-site scripting (XSS) vulnerabilities in versions 1.0–1.2.2 and 1.3.x before 1.3.5. The issues allow remote attackers to inject arbitrary web script or HTML via unspecified vectors; exploitation could compromise user sessions and/or perform actions with...

CVE-2011-1026

Multiple cross-site request forgery CSRF vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators...

CVE-2011-1026

Apache Archiva is affected by CSRF vulnerabilities (CVE-2011-1026) in Archiva 1.0–1.2.2 and 1.3.x before 1.3.5. The issues allow remote attackers to hijack administrator sessions, potentially compromising the entire application. Affected component: Archiva web admin/session handling; vulnerabilit...

Apache Archiva <= 1.3.4 Multiple Vulnerabilities - Active Check

Apache Archiva is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:archiva"; if...

[CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities

Hi, This is regarding multiple XSS Cross Site Scripting Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Project: Apache Archiva Severity: High Versions: 1.3.0 - 1.3.4. The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Exploit...

[CVE-2011-1026] Apache Archiva Multiple CSRF vulnerabilities

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

Apache Archiva跨站脚本和HTML注入漏洞

Bugtraq ID: 48011 CVE ID：CVE-2011-1077 Apache Archiva是一款管理一个和多个远程存储的软件。 Apache Archiva存在多个存储型和反射型跨站脚本问题，在请求参数中或发送表单中提交包含恶意代码的JavaScript，诱使用户处理可导致恶意脚本在目标用户浏览器上执行，可获得敏感信息或劫持用户会话 Apache Archiva 1.3.4 Apache Archiva 1.3.3 Apache Archiva 1.3.2 Apache Archiva 1.3.1 Apache Archiva 1.3 Apache Archiva...

Apache Archiva 1.3.4 Cross Site Scripting

Hi, This is regarding multiple XSS Cross Site Scripting Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Project: Apache Archiva Severity: High Versions: 1.3.0 - 1.3.4. The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Exploit...

[SECURITY] CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability

CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability Severity: High Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.4 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: An attacker can build a simple html page containing a hidden Image...

Apache Archiva 1.3.4 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

Apache Archiva 1.3.4 Cross Site Request Forgery

CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability Severity: High Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.4 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: An attacker can build a simple html page containing a hidden Image...

[SECURITY] CVE-2011-0533: Apache Archiva cross-site scripting vulnerability

CVE-2011-0533: Apache Archiva cross-site scripting vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.3 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: A request that included a specially crafted request...

Apache Archiva 1.0 - 1.3.1 CSRF Vulnerability

Exploit for multiple platform in category web applications ============================================= Apache Archiva 1.0 - 1.3.1 CSRF Vulnerability ============================================= ADVISORY INFO + Title: Apache Archiva Cross-site Request Forgery Vulnerability + Advisory URL:...

Apache Archiva 1.0 1.3.1 - Cross-Site Request Forgery

Apache Archiva 1.0 1.3.1 - Cross-Site Request Forgery ANATOLIA SECURITY ADVISORY -------------------------------------- ADVISORY INFO + Title: Apache Archiva Cross-site Request Forgery Vulnerability + Advisory URL: http://www.anatoliasecurity.com/adv/as-adv-2010-001.txt + Advisory ID: 2010-001 +...

Apache Archiva 1.0 < 1.3.1 - Cross-Site Request Forgery

ANATOLIA SECURITY ADVISORY -------------------------------------- ADVISORY INFO + Title: Apache Archiva Cross-site Request Forgery Vulnerability + Advisory URL: http://www.anatoliasecurity.com/adv/as-adv-2010-001.txt + Advisory ID: 2010-001 + Versions: Archiva 1.0 to 1.3.1 + Date: 29/09/2010 +...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

CVE-2010-4408

Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a 1 unattended...

CVE-2010-3449

CVE-2010-3449 is a CSRF flaw in Redback (used by Apache Archiva and Apache Continuum) that allows an attacker to hijack administrator sessions to modify credentials. Affected products include Archiva 1.0–1.3.1 (and related Continuum versions) with Redback versions before 1.2.4 used for authentica...

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...