Secunia
Login
|
|
CVE Reference: CVE-2007-3101 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-3101 |
|
|
Description: Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injected into Javascript that is sent to the client. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/34872 SAID Secunia Advisory: SA25618 OSVDB 36377 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=544 CONFIRM http://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12312536&styleName=Text&projectId=12310272 BID 24480 |
|
| Return to the previous page. |
