Lucene search
K

850 matches found

exploitpack
exploitpack
added 2008/01/09 12:0 a.m.17 views

Sun Java System Identity Manager 6.07.07.1 - idmlogin.jsp Multiple Cross-Site Scripting Vulnerabilities

Sun Java System Identity Manager 6.07.07.1 - idmlogin.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2008/01/09 12:0 a.m.23 views

Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/account/findForSelect.jsp?resultsForm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input. Attackers can exploit these...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2008/01/09 12:0 a.m.38 views

Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/login.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input. Attackers can exploit these...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2008/01/09 12:0 a.m.17 views

Sun Java System Identity Manager 6.07.07.1 - idmaccountfindForSelect.jsp?resultsForm Cross-Site Scripting

Sun Java System Identity Manager 6.07.07.1 - idmaccountfindForSelect.jsp?resultsForm Cross-Site Scripting source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site...

0.2AI score
Exploits0
exploitpack
exploitpack
added 2008/01/09 12:0 a.m.12 views

Sun Java System Identity Manager 6.07.07.1 - idmusermain.jsp?activeControl Cross-Site Scripting

Sun Java System Identity Manager 6.07.07.1 - idmusermain.jsp?activeControl Cross-Site Scripting source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting...

0.4AI score
Exploits0
Prion
Prion
added 2007/12/28 9:46 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204...

4.3CVSS6.2AI score0.00313EPSS
Exploits0References5Affected Software2
Prion
Prion
added 2007/12/28 9:46 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309...

4.3CVSS6.2AI score0.00881EPSS
Exploits0References9Affected Software2
Prion
Prion
added 2007/12/28 9:46 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

4.3CVSS6.2AI score0.00565EPSS
Exploits0References6Affected Software2
NVD
NVD
added 2007/12/28 9:46 p.m.11 views

CVE-2007-6570

Cross-site scripting XSS vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309...

4.3CVSS5.8AI score0.00881EPSS
Exploits0References9
NVD
NVD
added 2007/12/28 9:46 p.m.13 views

CVE-2007-6569

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

4.3CVSS5.8AI score0.00565EPSS
Exploits0References6
NVD
NVD
added 2007/12/28 9:46 p.m.10 views

CVE-2007-6571

Cross-site scripting XSS vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356...

4.3CVSS5.8AI score0.00313EPSS
Exploits0References5
CVE
CVE
added 2007/12/28 9:0 p.m.51 views

CVE-2007-6570

CVE-2007-6570 describes a Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server’s View URL Database functionality. Affected software versions are Sun Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11. The vulnerability allows remote attackers to inject arbitrary web...

4.3CVSS5.8AI score0.00881EPSS
Exploits0References9Affected Software2
Cvelist
Cvelist
added 2007/12/28 9:0 p.m.19 views

CVE-2007-6572

Cross-site scripting XSS vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204...

5.8AI score0.00313EPSS
Exploits0References5
Cvelist
Cvelist
added 2007/12/28 9:0 p.m.19 views

CVE-2007-6571

Cross-site scripting XSS vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356...

5.8AI score0.00313EPSS
Exploits0References5
Cvelist
Cvelist
added 2007/12/28 9:0 p.m.20 views

CVE-2007-6569

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

5.8AI score0.00565EPSS
Exploits0References6
Cvelist
Cvelist
added 2007/12/28 9:0 p.m.19 views

CVE-2007-6570

Cross-site scripting XSS vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309...

5.8AI score0.00881EPSS
Exploits0References9
CVE
CVE
added 2007/12/28 9:0 p.m.47 views

CVE-2007-6572

CVE-2007-6572 is an XSS vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1. It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (BugID 6566204). Affected components: Sun Java System Web Server 6.1 (pre-SP8) and 7.0 (pre-Update ...

4.3CVSS5.8AI score0.00313EPSS
Exploits0References5Affected Software2
CVE
CVE
added 2007/12/28 9:0 p.m.49 views

CVE-2007-6569

Sun Java System Web Proxy Server 4.x (and Web Server) are vulnerable to cross-site scripting in the View Error Log/related log-viewing function (BugID 6566246). The JVN entry confirms the issue is a client-side script injection via unspecified vectors, affecting the Web Server and Web Proxy Serve...

4.3CVSS5.8AI score0.00565EPSS
Exploits0References6Affected Software2
CVE
CVE
added 2007/12/28 9:0 p.m.53 views

CVE-2007-6571

CVE-2007-6571 describes a cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product/version: Sun Java System Web Proxy Server 3.6 prior to SP11...

4.3CVSS5.8AI score0.00313EPSS
Exploits0References5Affected Software2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2007/12/21 12:0 a.m.18 views

JVN#89292430 Cross-site scripting in Sun Java System Web Server and Sun Java System Web Proxy Server

Sun Java System Web Server and Sun Java System Web Proxy Server, which are both web servers, provide a function for a user to view access logs and other records in a web browser. This function is vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web...

6.8AI score
Exploits0
Rows per page
Query Builder