CVE

Id
16358  
CVE No.
CVE-2006-0254  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
130240 16358 CVE-2006-0254 BUGTRAQ:20060115 Apache Geronimo 1.0 - CSS and persistent HTML-Injectionvulnerabilities  View
130241 16358 CVE-2006-0254 URL:http://www.securityfocus.com/archive/1/archive/1/421996/100/0/threaded  View
130242 16358 CVE-2006-0254 MISC:http://issues.apache.org/jira/browse/GERONIMO-1474  View
130243 16358 CVE-2006-0254 MISC:http://www.oliverkarow.de/research/geronimo_css.txt  View
130244 16358 CVE-2006-0254 CONFIRM:https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create  View
130245 16358 CVE-2006-0254 REDHAT:RHSA-2008:0261  View
130246 16358 CVE-2006-0254 URL:http://www.redhat.com/support/errata/RHSA-2008-0261.html  View
130247 16358 CVE-2006-0254 REDHAT:RHSA-2008:0630  View
130248 16358 CVE-2006-0254 URL:http://rhn.redhat.com/errata/RHSA-2008-0630.html  View
130249 16358 CVE-2006-0254 BID:16260  View
130250 16358 CVE-2006-0254 URL:http://www.securityfocus.com/bid/16260  View
130251 16358 CVE-2006-0254 VUPEN:ADV-2006-0217  View
130252 16358 CVE-2006-0254 URL:http://www.vupen.com/english/advisories/2006/0217  View
130253 16358 CVE-2006-0254 SECUNIA:18485  View
130254 16358 CVE-2006-0254 URL:http://secunia.com/advisories/18485  View
130255 16358 CVE-2006-0254 SECUNIA:31493  View
130256 16358 CVE-2006-0254 URL:http://secunia.com/advisories/31493  View
130257 16358 CVE-2006-0254 XF:geronimo-webaccesslog-viewer-xss(24159)  View
130258 16358 CVE-2006-0254 URL:http://xforce.iss.net/xforce/xfdb/24159  View
130259 16358 CVE-2006-0254 XF:geronimo-jspexamples-xss(24158)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57831 JVNDB-2006-000027 Oracle Database の Advanced Queuing コンポーネントにおける脆弱性 (DB01) ------------ CVE-2006-0256 16358 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000027.html  View