Description

Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digest_realm or (2) digest_username parameters. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2010-2032

Related Vulnerabilities

Oracle JRE CVE-2014-0432 Vulnerability (CVE-2014-0432)

WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Security Bypass (2.3.2)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-9402)

WordPress Plugin Quick Paypal Payments Security Bypass (5.7.21)

Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-8163)

Severity

Medium

Classification

CVE-2010-2032 CWE-707

Tags

Missing Update Known Vulnerabilities