Lucene search
RedhatCVELIST:CVE-2006-1548HistoryMar 30, 2006 - 10:00 p.m.
CVE-2006-1548
2006-03-3022:00:00
redhat
www.cve.org
1
Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.
References
issues.apache.org/bugzilla/show_bug.cgi?id=38749
lists.suse.com/archive/suse-security-announce/2006-May/0004.html
secunia.com/advisories/19493
secunia.com/advisories/20117
securitytracker.com/id?1015856
struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html
www.securityfocus.com/bid/17342
www.vupen.com/english/advisories/2006/1205
exchange.xforce.ibmcloud.com/vulnerabilities/25614
issues.apache.org/struts/browse/STR-2781
Related
osv
osv
Cross-site scripting in Apache Struts
2022-05-01 06:50:42
prion
prion
Cross site scripting
2006-03-30 22:02:00
nvd
nvd
CVE-2006-1548
2006-03-30 22:02:00
ubuntucve
ubuntucve
CVE-2006-1548
2006-03-30 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-14 02:37:40
cve
cve
CVE-2006-1548
2006-03-30 22:02:00
github
github
Cross-site scripting in Apache Struts
2022-05-01 06:50:42
openvas
openvas
Apache Struts Security Update (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)
2021-09-16 00:00:00
redhat
redhat
(RHSA-2006:0281) struts security update for Red Hat Application Server
2006-05-03 00:00:00
ibm
ibm
Security Bulletin: Multiple CVEs affect IBM Integration Designer
2023-02-01 19:40:57