MitreCVELIST:CVE-2007-6306CVE-2007-6306
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
References
jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680
jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662
jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662
osvdb.org/41843
osvdb.org/41844
osvdb.org/41845
rhn.redhat.com/errata/RHSA-2008-0630.html
secunia.com/advisories/27959
secunia.com/advisories/31493
securityreason.com/securityalert/3430
www.rapid7.com/advisories/R7-0031.jsp
www.redhat.com/support/errata/RHSA-2008-0151.html
www.redhat.com/support/errata/RHSA-2008-0158.html
www.redhat.com/support/errata/RHSA-2008-0213.html
www.redhat.com/support/errata/RHSA-2008-0261.html
www.securityfocus.com/archive/1/484709/100/0/threaded
www.securityfocus.com/bid/26752
exchange.xforce.ibmcloud.com/vulnerabilities/38922
Related
