Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
GlassFish Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2009-1553 - Vulnerability Database
GlassFish

GlassFish Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2009-1553

Medium
Reference: CVE-2009-1553
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-1553
Title: GlassFish Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf (2) configuration/configuration.jsf (3) customMBeans/customMBeans.jsf (4) resourceNode/resources.jsf (5) sysnet/registration.jsf or (6) webService/webServicesGeneral.jsf or the name parameter to (7) configuration/auditModuleEdit.jsf (8) configuration/httpListenerEdit.jsf or (9) resourceNode/jdbcResourceEdit.jsf.