Published: 18/01/2006 Updated: 19/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache geronimo 1.0

source: wwwsecurityfocuscom/bid/16260/info Apache Geronimo is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input A successful exploit could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials The a ...

source: wwwsecurityfocuscom/bid/16260/info Apache Geronimo is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input A successful exploit could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials The ...

NVD-CWE-Other http://issues.apache.org/jira/browse/GERONIMO-1474 http://www.oliverkarow.de/research/geronimo_css.txt https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create http://www.securityfocus.com/bid/16260 http://secunia.com/advisories/18485 http://www.redhat.com/support/errata/RHSA-2008-0261.html http://rhn.redhat.com/errata/RHSA-2008-0630.html http://secunia.com/advisories/31493 http://www.vupen.com/english/advisories/2006/0217 https://exchange.xforce.ibmcloud.com/vulnerabilities/24159 https://exchange.xforce.ibmcloud.com/vulnerabilities/24158 http://www.securityfocus.com/archive/1/421996/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27095/

CVE-2006-0254

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect