Resin Security Vulnerabilities and Issues — Resin CVE List

Lucene search

CauchoResin

2 matches found

CVE•added 2010/05/24 7:30 p.m.•39 views

CVE-2010-2032

Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digest_realm or (2) digest_username parameters. NOTE: som...

4.3CVSS5.9AI score0.04383EPSS

CVE•added 2008/06/30 10:41 p.m.•36 views

CVE-2008-2462

Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

4.3CVSS5.8AI score0.04886EPSS