Back to search
CVE-2009-0038
Published: Apr 17, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214
x_refsource_CONFIRM
ADV-2009-1089
vdb-entry
x_refsource_VUPEN
34562
vdb-entry
x_refsource_BID
20090416 [DSECRG-09-019] Apache Geronimo - XSS vulnerabilities.txt
mailing-list
x_refsource_BUGTRAQ
http://issues.apache.org/jira/browse/GERONIMO-4597
x_refsource_CONFIRM
34715
third-party-advisory
x_refsource_SECUNIA
http://dsecrg.com/pages/vul/show.php?id=119
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now