CVE-2007-5280

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5280. Reason: This candidate is a duplicate of CVE-2007-5280. Notes: All CVE users should reference CVE-2007-5280 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5280

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...

CVE-2007-5280

CVE-2007-5280 describes multiple XSS vulnerabilities in AppFuse before 2.0 Final, triggered via input recorded in (1) success or (2) error messages within messages.jsp. The affected component is the messages.jsp handling in AppFuse; root cause is improper sanitization/encoding of user input leadi...