Apache Struts struts-cookbook processSimple.do message Parameter XSS

The remote web server hosts struts-cookbook, a demonstration application for the Struts framework. Input passed via the 'message' parameter to the 'processSimple.do' page is not properly sanitized before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted...

CVE-2012-1007

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to 2 struts-cookbook/processSimple.do or 3...

PT-2012-3010

Name of the Vulnerable Software and Affected Versions Apache Struts version 1.3.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain API endpoints. The vulnerable parameters include the name parameter to...