CVE-2009-4612

Multiple cross-site scripting XSS vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 jspsnoop/, 2 jspsnoop/ERROR/, and 3 jspsnoop/IOException/, and possibly t...

CVE-2009-4612

CVE-2009-4612 refers to multiple cross-site scripting (XSS) flaws in Mort Bay Jetty 6.1.x (up to 6.1.21). An attacker could remotely exploit via PATH_INFO in the WebApp JSP Snoop page to inject scripts in a user’s browser, potentially compromising cookies and session data. Affected products in th...

CVE-2009-4612

creationtimestamp| type| source ---|---|--- 2009-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33564...