CVE-2006-0254

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time…

published January 18, 2006

CVSS

—

EPSS

32%

Percentile

98.3

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.32247 · 98.3th percentile
Published: 2006-01-18T02:00Z

EPSS history

Timeline

18 JAN 02:00Z
Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time…
cvelistv5