NVD

Id
6413  
Name
CVE-2008-6682  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-04-09  
Modified Date
2009-04-28  
Seq
2008-6682  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
37449 6413 CVE-2008-6682 http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html  View
37450 6413 CVE-2008-6682 http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html  View
37451 6413 CVE-2008-6682 34686  View
37452 6413 CVE-2008-6682 https://issues.apache.org/struts/browse/WW-2414  View
37453 6413 CVE-2008-6682 https://issues.apache.org/struts/browse/WW-2427  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41656 JVNDB-2009-002663 Apache Struts における複数のクロスサイトスクリプティングの脆弱性 Apache Struts には、(1) s:a タグの href 属性内にある " (ダブルクォート) 文字列、(2) s:url タグの action 属性内にあるパラメータの処理に関連した、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6682 36795 CVE-2008-6682 6413 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002663.html 2009-04-09 2011-06-09 View