Vulnetix
Try Vulnetix Request Demo
CVE-2006-0254 PUBLISHED

Reported by mitre · Published January 18, 2006

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

Affected Products

VendorProductVersions
n/an/an/a
Mavengeronimo:geronimo-console-standard0, 0
n/an/an/a, n/a, n/a

Timeline

References

Open in Interactive Console →