Description

Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.

Remediation

References

http://packetstormsecurity.com/files/124933

http://osvdb.org/102573

http://osvdb.org/102571

http://seclists.org/fulldisclosure/2014/Jan/164

http://osvdb.org/102572

http://osvdb.org/102570

https://exchange.xforce.ibmcloud.com/vulnerabilities/90699

http://www.securityfocus.com/archive/1/530877/100/0/threaded

Related Vulnerabilities

CVE-2021-43308 Vulnerability in npm package markdown-link-extractor

CVE-2018-16330 Vulnerability in maven package org.webjars.npm:editor.md

CVE-2022-25973 Vulnerability in npm package mc-kill-port

CVE-2020-8131 Vulnerability in maven package org.webjars.npm:yarn

CVE-2022-26260 Vulnerability in npm package simple-plist

Severity

Critical

Classification

CWE-79

Tags

Exploit