Lucene search
+L

45 matches found

OpenVAS
OpenVAS
added 2011/02/11 12:0 a.m.37 views

Apache Continuum Cross Site Scripting Vulnerability

Apache Continuum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker...

4.3CVSS6.4AI score0.04198EPSS
SaveExploits0References3
Prion
Prion
added 2010/12/06 8:13 p.m.24 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

6.8CVSS7.2AI score0.04837EPSS
SaveExploits4References19Affected Software2
NVD
NVD
added 2010/12/06 8:13 p.m.22 views

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

6.8CVSS6.9AI score0.04837EPSS
SaveExploits4References19
CVE
CVE
added 2010/12/06 8:0 p.m.77 views

CVE-2010-3449

CVE-2010-3449 is a CSRF flaw in Redback (used by Apache Archiva and Apache Continuum) that allows an attacker to hijack administrator sessions to modify credentials. Affected products include Archiva 1.0–1.3.1 (and related Continuum versions) with Redback versions before 1.2.4 used for authentica...

6.8CVSS7AI score0.04837EPSS
SaveExploits4References19Affected Software2
Cvelist
Cvelist
added 2010/12/06 8:0 p.m.34 views

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

6.8AI score0.04837EPSS
SaveExploits4References19
Rows per page
Query Builder