NVD

Id
58994  
Name
CVE-2006-0254  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-17  
Modified Date
2011-03-07  
Seq
2006-0254  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302974 58994 CVE-2006-0254 http://issues.apache.org/jira/browse/GERONIMO-1474  View
302975 58994 CVE-2006-0254 RHSA-2008:0630  View
302976 58994 CVE-2006-0254 http://www.oliverkarow.de/research/geronimo_css.txt  View
302977 58994 CVE-2006-0254 RHSA-2008:0261  View
302978 58994 CVE-2006-0254 20060115 Apache Geronimo 1.0 - CSS and persistent HTML-Injectionvulnerabilities  View
302979 58994 CVE-2006-0254 16260  View
302980 58994 CVE-2006-0254 ADV-2006-0217  View
302981 58994 CVE-2006-0254 geronimo-jspexamples-xss(24158)  View
302982 58994 CVE-2006-0254 geronimo-webaccesslog-viewer-xss(24159)  View
302983 58994 CVE-2006-0254 https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create  View

Related JVN