145 matches found
CVE-2009-2107
Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...
struts LookupDispatchAction XSS
Cross-site scripting XSS vulnerability in 1 LookupDispatchAction and possibly 2 DispatchAction and 3 ActionDispatcher in Apache Software Foundation ASF Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting...
snoop.servlet.txt
LoWNOISE Snoop Servlet Tomcat 3.1 and 3.0 ====PRODUCT: Snoop Servlet on Release Build 3.1 and 3.0 of Tomcat from Apache Software Foundation. http://jakarta.apache.org ====PROBLEM: The Snoop Servlet will give you too much info PATHs, OS, etc. ====EXPLOIT:...
