Lucene search
GoogleOSV:GHSA-PCHF-755W-JJ6VHistoryMay 17, 2022 - 1:59 a.m.
QooxDoo XSS in Callback Parameter
2022-05-1701:59:37
Google
osv.dev
10
cross-site scripting
qooxdoo
callback parameter
remote attackers
injection
web script
html
vulnerability
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
References
www.exploit-db.com/exploits/17127
exchange.xforce.ibmcloud.com/vulnerabilities/66574
nvd.nist.gov/vuln/detail/CVE-2011-1714
web.archive.org/web/20110410180449/blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues
web.archive.org/web/20201207203617/www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html
web.archive.org/web/20201207203620/www.securityfocus.com/bid/47184
Related
prion
prion
Cross site scripting
2011-04-18 18:55:00
nvd
nvd
CVE-2011-1714
2011-04-18 18:55:02
cvelist
cvelist
CVE-2011-1714
2011-04-18 18:00:00
github
github
QooxDoo XSS in Callback Parameter
2022-05-17 01:59:37
cve
cve
CVE-2011-1714
2011-04-18 18:55:02
exploitdb
exploitdb
eyeos 2.3 - Multiple Vulnerabilities
2011-04-06 00:00:00