- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 32975
- Проверка EDB
-
- Пройдено
- Автор
- DSECRG
- Тип уязвимости
- REMOTE
- Платформа
- MULTIPLE
- CVE
- cve-2009-1553
- Дата публикации
- 2009-05-05
Код:
source: https://www.securityfocus.com/bid/34824/info
GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
GlassFish Enterprise Server 2.1 is vulnerable; other versions may also be affected.
http://www.example.com/customMBeans/customMBeans.jsf?');};alert("DSecRG_XSS");</script><!--
- Источник
- www.exploit-db.com