Apache Struts XWork 's:submit' HTML Tag Cross Site Scripting Vulnerability

Bugtraq ID: 47784
Class: Input Validation Error
CVE: CVE-2011-1772
Remote: Yes
Local: No
Published: May 10 2011 12:00AM
Updated: May 10 2011 12:00AM
Credit: Dr. Marian Ventuneac, Genworth.
Vulnerable: Apache Software Foundation Struts 2.2.1 1
Apache Software Foundation Struts 2.2
Apache Software Foundation Struts 2.1.8 .1
Apache Software Foundation Struts 2.1.8
Apache Software Foundation Struts 2.1.6
Apache Software Foundation Struts 2.1.5
Apache Software Foundation Struts 2.1.2
Apache Software Foundation Struts 2.1.1
Apache Software Foundation Struts 2.1.1
Apache Software Foundation Struts 2.1
Apache Software Foundation Struts 2.0.9
Apache Software Foundation Struts 2.0.8
Apache Software Foundation Struts 2.0.7
Apache Software Foundation Struts 2.0.6
Apache Software Foundation Struts 2.0.5
Apache Software Foundation Struts 2.0.4
Apache Software Foundation Struts 2.0.3
Apache Software Foundation Struts 2.0.2
Apache Software Foundation Struts 2.0.1
Apache Software Foundation Struts 2.0
Apache Software Foundation Struts 2.1.4
Apache Software Foundation Struts 2.1.3
Not Vulnerable: Apache Software Foundation Struts 2.2.3


 

Privacy Statement
Copyright 2010, SecurityFocus