2 matches found
CVE-2011-0533
CVE-2011-0533 is a cross-site scripting (XSS) vulnerability affecting Apache Continuum and Archiva. The issue allows remote attackers to inject arbitrary web script or HTML via a crafted parameter related to the autoIncludeParameters setting for the extremecomponents table in affected versions. A...
CVE-2016-15057
CVE-2016-15057 describes an improper neutralization of special elements in Apache Continuum that enables a Command Injection via the Installations REST API. Affected are all versions of Apache Continuum, and exploitation would allow an attacker to invoke arbitrary commands on the server without u...