Published: 29/08/2011 Updated: 09/10/2018

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 231

Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x prior to 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache wicket 1.4.3
apache wicket 1.4.4
apache wicket 1.4.11
apache wicket 1.4.12
apache wicket 1.4.1
apache wicket 1.4.2
apache wicket 1.4.9
apache wicket 1.4.10
apache wicket 1.4.5
apache wicket 1.4.6
apache wicket 1.4.13
apache wicket 1.4.14
apache wicket 1.4.0
apache wicket 1.4.7
apache wicket 1.4.8
apache wicket 1.4.15
apache wicket 1.4.16
apache wicket 1.4.17

Creating proof of concepts for some old CVEs

Vulnerability Research CVEs CVE-2018-6184 CVE-2011-2712 CVE-2018-3778 CVE-2018-1002204 Bonus Nextjs LFI

CWE-79 http://www.securityfocus.com/bid/49290 http://wicket.apache.org/2011/08/23/cve-2011-2712.html http://secunia.com/advisories/45727 http://securityreason.com/securityalert/8357 http://www.securitytracker.com/id?1025976 https://exchange.xforce.ibmcloud.com/vulnerabilities/69394 http://www.securityfocus.com/archive/1/519398/100/0/threaded https://nvd.nist.gov https://github.com/masasron/vulnerability-research

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-2712

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect