Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37927/info Jetty is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37927/info Jetty is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Jetty 'CookieDump.java' Cross-Site Scripting Vulnerability

Jetty WebServer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mort Bay / Eclipse Jetty Detection (HTTP)

HTTP based detection of Mort Bay / Eclipse Jetty. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

Cross site scripting

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579

CVE-2009-3579 affects Mort Bay Jetty (CookieDump.java sample app) with Jetty 6.1.19/6.1.20. The CookieDump.java code accepts user input for the Name/Value GET parameters to /cookie and uses it to generate dynamic HTML output without sanitization, enabling a remote attacker to inject arbitrary HTM...

CVE-2009-3579

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CVE-2009-3579: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/...

CORE-2009-0922: Jetty Persistent XSS in Sample Cookies Application

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Jetty Persistent XSS in Sample Cookies Application 1. Advisory Information Title: Jetty Persistent XSS in Sample Cookies Application Advisory Id: CORE-2009-0922...

Jetty Persistent XSS in Sample Cookies Application

Advisory ID Internal CORE-2009-0922 1. Advisory Information Title: Jetty Persistent XSS in Sample Cookies Application Advisory Id: CORE-2009-0922 Date published: 2009-10-06 Date of last update: 2009-10-06 Vendors contacted: Jetty Team Release mode: Coordinated release 2. Vulnerability Information...

Fedora Core 10 FEDORA-2009-5513 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5513. OpenVAS Vulnerability Test $Id: fcore20095513.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5513 jetty Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 9 FEDORA-2009-5500 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5500. OpenVAS Vulnerability Test $Id: fcore20095500.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5500 jetty Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 11 FEDORA-2009-5509 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5509. OpenVAS Vulnerability Test $Id: fcore20095509.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5509 jetty Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 9 FEDORA-2009-5500 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5500. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-5509 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5509. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-5513 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5513. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 11 : jetty-5.1.15-4.fc11 (2009-5509)

This build upgrades jetty to 5.1.15 which addresses CVE-2009-1523. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...