CVE-2012-4563

Cross-site scripting XSS vulnerability in Google Web Toolkit GWT 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Eucalyptus Cloud Controller Console Detection

The web console for Eucalyptus Cloud Controller, a Java application that implements an interface compatible with Amazon's EC2, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61610; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25";...

CA ARCserve D2D GWT RPC Request Credentials Disclosure (CVE-2011-3011)

A credentials disclosure vulnerability has been reported in CA ARCserve D2D. The vulnerability is due to an error while processing Google Web Toolkit GWT RPC requests. A remote attacker can exploit this vulnerability by sending a specially crafted RPC request to an affected server. Successful...

SA-CONTRIB-2011-033 - iWebkit - Cross Site Scripting

iWebKit is a web toolkit designed to create iPhone and iPod touch compatible websites and webapps. iWebkit does not properly sanitize menu links when displayed, allowing a malicious user to embed scripts in menu items, thus creating a cross site scripting XSS vulnerability that may lead to an...

Google Web Toolkit vulnerable to cross-site scripting

Overview Google Web Toolkit GWT is vulnerable to cross-site scripting. Google Web Toolkit GWT is an open source software development framework that allows web developers to create Ajax applications in Java. The benchmark reporting system in GWT is vulnerable to cross-site scripting. Impact An...

CVE-2007-6452

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

Cross site scripting

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-6452

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-6452

CVE-2007-6452 affects Google Web Toolkit (GWT) – specifically the benchmark reporting system. The connected JVN entry states a cross-site scripting (XSS) vulnerability in GWT before version 1.4.61, enabling arbitrary script execution in the user’s browser. No exploit details are provided beyond t...

CVE-2007-6452

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

JVN#75130343 Google Web Toolkit vulnerable to cross-site scripting

Google Web Toolkit GWT is an open source software development framework that allows web developers to create Ajax applications in Java. The benchmark reporting system in GWT is vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Updat...

CVE-2007-2378

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

Design/Logic Flaw

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

CVE-2007-2378

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...

CVE-2007-2378

The CVE-2007-2378 issue concerns the Google Web Toolkit (GWT) framework, where JSON data is exchanged without a protection scheme, enabling JavaScript Hijacking. IBM’s bulletin specifies ITNM (IBM Tivoli Network Manager) IP Edition 4.2 GA through 4.2.0.15 is affected, with a fix in ITNM 4.2 Fix P...

PT-2007-3711 · Google · Google Web Toolkit

Name of the Vulnerable Software and Affected Versions: Google Web Toolkit GWT affected versions not specified Description: The issue concerns the exchange of data using JavaScript Object Notation JSON without proper protection, allowing remote attackers to obtain the data. This can be achieved...

CVE-2006-0044

Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields"...