CVE-2022-37724: Improper Neutralization of Input During Web Page Generation

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

Apple WebObjects Developer NT4 IIS4.0 CGI-adapter 4.5 Developer Remote Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1896/info A denial-of-service vulnerability exists in Apple's WebObjects 4.5 Developer, a popular platform for developing web-based applications. The vulnerable version is Windows NT 4.0 SP5, when run in conjunction with...

Apple WebObjects未明跨站脚本漏洞

Bugtraq ID: 50679 CVE ID：CVE-2011-3998 Apple WebObjects是一款WEB应用服务器，可用于创建强大的WEB服务。 WebObjects存在一个跨站脚本漏洞，允许任意脚本在用户WEB浏览器上执行。 Apple WebObjects 5.1.4 Apple WebObjects 5.1.3 Apple WebObjects 5.1.2 Apple WebObjects 5.2 Apple WebObjects 5.1 Apple WebObjects 5.0 厂商解决方案 用户可联系供应商获得最新的应用程序版本：...

CVE-2011-3998

Cross-site scripting XSS vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3998

Cross-site scripting XSS vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3998

Apple WebObjects 5.2 and earlier are affected by a cross-site scripting (XSS) vulnerability. The issue permits remote attackers to cause arbitrary JavaScript/HTML execution in a user’s browser via unspecified vectors. Affected software is WebObjects, a web application server from Apple, with the ...

CVE-2011-3998: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WebObjects vulnerable to cross-site scripting

Overview WebObjects provided by Apple, contains a cross-site scripting vulnerability. WebObjects provided by Apple is a web application server. WebObjects contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC...

JVN#37223351: WebObjects vulnerable to cross-site scripting

WebObjects provided by Apple is a web application server. WebObjects contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the develope...

Information disclosure

The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs...

CVE-2008-2318

The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs...

CVE-2008-2318

The CVE-2008-2318 issue affects Apple’s Xcode WebObjects: the WOHyperlink API in WebObjects before Xcode 3.1 appends local session IDs to generated non-local URLs, enabling potential information disclosure by remote attackers reading those requests. Impact is information leakage without exploitat...

CVE-2008-2318: Exposure of Sensitive Information to an Unauthorized Actor

The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs...

Apple Xcode WebObjects WOHyperlink信息泄露漏洞

BUGTRAQ ID: 30191 CVECAN ID: CVE-2008-2318 Xcode是苹果机器上所使用的开发工具。 WebObjects中包含有一个API用于通过WOHyperlink动态单元在HTML文档中生成URL。在使用时即使对于绝对URL WOHyperlink也会向所生成的URL附加会话ID，因此使用WOHyperlink创建指向其他站点的URL可能导致向该站点泄露当前用户的会话ID。 Apple XCode 2.0 - 3.0 Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

Apple Xcode WebObjects插件权限提升漏洞

Xcode是苹果机器上所使用的开发工具。 Xcode在以高权限调用外部工具时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 Xcode需要使用OpenBase技术为WebObjects组件提供额外的功能。OpenBase库在调用/Library/OpenBase/bin/gnutar时没有正确地使用setuid权限，在以euid=0运行OpenBase时调用了gnutar。通过使用TAROPTIONS环境变量就可以强制gnutar没有指定路径便调用gzip，因此攻击者可以通过控制PATH变量获得root权限。 Apple XCode 2.2 OpenBase OpenBase...

CVE-2006-4387

Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications...

CVE-2006-4387

Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications...

CVE-2006-4387

CVE-2006-4387 concerns Apple Mac OS X 10.4.x (specifically 10.4 through 10.4.7). The issue: after an administrator clears the “Allow user to administer this computer” checkbox in System Preferences for a user, the user is not removed from the appserveradm or appserverusr groups, leaving the user ...

CVE-2006-4387: Undefined Security Weakness

Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications...