CVE

Id
17652  
CVE No.
CVE-2006-1548  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147660 17652 CVE-2006-1548 CONFIRM:http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html  View
147661 17652 CVE-2006-1548 CONFIRM:http://issues.apache.org/bugzilla/show_bug.cgi?id=38749  View
147662 17652 CVE-2006-1548 CONFIRM:https://issues.apache.org/struts/browse/STR-2781  View
147663 17652 CVE-2006-1548 SUSE:SUSE-SR:2006:010  View
147664 17652 CVE-2006-1548 URL:http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html  View
147665 17652 CVE-2006-1548 BID:17342  View
147666 17652 CVE-2006-1548 URL:http://www.securityfocus.com/bid/17342  View
147667 17652 CVE-2006-1548 VUPEN:ADV-2006-1205  View
147668 17652 CVE-2006-1548 URL:http://www.vupen.com/english/advisories/2006/1205  View
147669 17652 CVE-2006-1548 SECTRACK:1015856  View
147670 17652 CVE-2006-1548 URL:http://securitytracker.com/id?1015856  View
147671 17652 CVE-2006-1548 SECUNIA:19493  View
147672 17652 CVE-2006-1548 URL:http://secunia.com/advisories/19493  View
147673 17652 CVE-2006-1548 SECUNIA:20117  View
147674 17652 CVE-2006-1548 URL:http://secunia.com/advisories/20117  View
147675 17652 CVE-2006-1548 XF:struts-lookupmap-xss(25614)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58062 JVNDB-2006-000258 Dia の xfig-import.c におけるバッファオーバーフローの脆弱性 Dia には、 Xfig ファイルのインポート機能 (xfig-import.c) において、color_index、points、depth パラメータに対するチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-1550 17652 7.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000258.html  View