Description
Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.
Remediation
References
http://packetstormsecurity.com/files/124933
http://osvdb.org/102573
http://osvdb.org/102571
http://seclists.org/fulldisclosure/2014/Jan/164
http://osvdb.org/102572
http://osvdb.org/102570
https://exchange.xforce.ibmcloud.com/vulnerabilities/90699
http://www.securityfocus.com/archive/1/530877/100/0/threaded
Related Vulnerabilities
CVE-2021-27582 Vulnerability in maven package org.mitre:openid-connect-server
CVE-2021-23358 Vulnerability in maven package org.webjars.bower:underscore
CVE-2019-13127 Vulnerability in npm package mxgraph
CVE-2022-21213 Vulnerability in maven package org.webjars:mout
CVE-2023-38286 Vulnerability in maven package org.thymeleaf:thymeleaf