CVE

Id
49684  
CVE No.
CVE-2011-1772  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539552 49684 CVE-2011-1772 MISC:http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html  View
539553 49684 CVE-2011-1772 MISC:http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html  View
539554 49684 CVE-2011-1772 MISC:http://www.ventuneac.net/security-advisories/MVSA-11-006  View
539555 49684 CVE-2011-1772 CONFIRM:http://struts.apache.org/2.2.3/docs/version-notes-223.html  View
539556 49684 CVE-2011-1772 CONFIRM:http://struts.apache.org/2.x/docs/s2-006.html  View
539557 49684 CVE-2011-1772 CONFIRM:https://issues.apache.org/jira/browse/WW-3579  View
539558 49684 CVE-2011-1772 JVN:JVN#25435092  View
539559 49684 CVE-2011-1772 URL:http://jvn.jp/en/jp/JVN25435092/index.html  View
539560 49684 CVE-2011-1772 JVNDB:JVNDB-2011-000106  View
539561 49684 CVE-2011-1772 URL:http://jvndb.jvn.jp/jvndb/JVNDB-2011-000106  View
539562 49684 CVE-2011-1772 BID:47784  View
539563 49684 CVE-2011-1772 URL:http://www.securityfocus.com/bid/47784  View
539564 49684 CVE-2011-1772 VUPEN:ADV-2011-1198  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26363 JVNDB-2012-002070 libarchive の archive_read_support_format_iso9660.c におけるバッファオーバーフローの脆弱性 libarchive の archive_read_support_format_iso9660.c 内の (1) heap_add_entry および (2) relocate_dir 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-1777 49684 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002070.html  View