4966 matches found
CVE-2009-4521: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools BIRT before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the report parameter...
WebSphere 7.0.0.7 Eclipse帮助导致XSS漏洞
No description provided by source...
MDVA-2009:032-1 : eclipse
This update addresses minor issues with eclipse. eclipse can not be installed after firefox3 installation 48095 Update: Packages for 2008.0 are being provided due to extended support for Corporate products. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch i...
[SECURITY] Fedora 11 Update: eclipse-3.4.2-17.fc11
The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...
jetty 6.x - 7.x xss, information disclosure, injection
Exploit for jsp platform in category web applications ====================================================== jetty 6.x - 7.x xss, information disclosure, injection ====================================================== Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in...
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor...
jetty 6.x < 7.x - Cross-Site Scripting / Information Disclosure / Injection
Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...
Mort Bay / Eclipse Jetty Detection (HTTP)
HTTP based detection of Mort Bay / Eclipse Jetty. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Eclipse BIRT <= 2.2.1 xss
No description provided by source. Eclipse BIRT = 2.2.1 Reflected XSS Vendor: Eclipse Advisory: http://antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss/ Author: Michele "euronymous" Orr euronymous AT antisnatchor DOT com Quite a common problem in a lot of Java based applications: reflected...
Eclipse BIRT <= 2.2.1 xss
Exploit for unknown platform in category web applications ========================= Eclipse BIRT &r=-703171660 HTTP/1.1 Host: localhost:8780 User-Agent: Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18 Gecko/20081029 Firefox/2.0.0.18 Accept:...
Eclipse BIRT 2.2.1 Cross Site Scripting
Eclipse BIRT &r=-703171660 HTTP/1.1 Host: localhost:8780 User-Agent: Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18 Gecko/20081029 Firefox/2.0.0.18 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,/;q=0.5 Accept-Language: en-us,en;q=0.5...
Eclipse BIRT 2.2.1 - run?__report Cross-Site Scripting
Eclipse BIRT 2.2.1 - run?report Cross-Site Scripting source: https://www.securityfocus.com/bid/36674/info Eclipse BIRT Business Intelligence and Reporting Tools is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage thi...
[AntiSnatchOr] Eclipse BIRT <= 2.2.1 Reflected XSS
Eclipse BIRT = 2.2.1 Reflected XSS Vendor: Eclipse Advisory: http://antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss/ Author: Michele "euronymous" Orr euronymous AT antisnatchor DOT com Quite a common problem in a lot of Java based applications: reflected XSS in Java stack trace. A Reflecte...
Eclipse BIRT 2.2.1 - 'run?__report' Cross-Site Scripting
source: https://www.securityfocus.com/bid/36674/info Eclipse BIRT Business Intelligence and Reporting Tools is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...
CVE-2009-2742
Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...
CVE-2009-2742
Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...
CVE-2009-2742
IBM WebSphere Application Server 6.1 before 6.1.0.27 is affected by a cross-site scripting (XSS) vulnerability in the Eclipse Help component. The root cause is insufficient validation of input in Eclipse Help, allowing remote attackers to inject arbitrary script/HTML via unspecified input. Affect...
IBM WebSphere Application Server Eclipse Help跨站脚本漏洞
Bugraq ID: 36455 CVE ID：CVE-2009-2742 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server包含的Eclipse Help组件不正确验证用户提供的输入，远程攻击者可以利用漏洞使用特殊构建的URL，诱使用户点击，可在目标用户浏览器上执行任意脚本代码。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1 25 IBM Websphere Application Server 6.1 23 IBM...
CVE-2009-2742: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...