Apache Archiva CSRF Vulnerabilities (Jun 2010)

Apache Archiva is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[CVE-2010-3449] Apache Archiva CSRF Vulnerability

CVE-2010-3449: Apache Archiva CSRF Vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Archiva 1.0 to 1.0.3 end of life Archiva 1.1 to 1.1.4 end of life Archiva 1.2 to 1.2.2 end of life Archiva 1.3 to 1.3.1 Description: Apache Archiva doesn't check which fo...

Apache Archiva Detection (HTTP)

HTTP based detection of Apache Archiva. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100923";...

Apache Struts 2 / XWork Remote Code Execution (safe check)

The remote web application appears to use Struts 2, a web framework that uses XWork. Due to a vulnerability in XWork, it is possible to disable settings designed to prevent remote code execution. A remote attacker can exploit this by submitting an HTTP request containing specially crafted OGNL...