Page 2 of 7 results (0.008 seconds)

CVSS: 4.3EPSS: 1%CPEs: 26EXPL: 3

CVE-2010-2275 – Dojo Toolkit 1.4.1 - '/dijit/tests/_testCommon.js?theme' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2010-2275

Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html. Vulnerabilidad de ejecución de secuencias en sitios cruzados(XSS) en Dijit/tests/_testCommon.js en Dojo Toolkit SDK antes de v1.4.2 permite a atacantes remotos inyectar HTML o secuencias de comandos web a través del parámetro 'theme', como lo demuestra un ataque contra Dijit/tests/form/test_Button.html. • https://www.exploit-db.com/exploits/33764 http://bugs.dojotoolkit.org/ticket/10773 http://secunia.com/advisories/38964 http://secunia.com/advisories/40007 http://www-01.ibm.com/support/docview.wss?uid=swg21431472 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 http://www-1.ibm.com/support/docview.wss? • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 1

CVE-2008-6681

https://notcve.org/view.php?id=CVE-2008-6681

Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element. vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en dijit.Editor en Dojo anteriores a v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de entidades en un elemento TEXTAREA. • http://trac.dojotoolkit.org/ticket/2140 http://www.dojotoolkit.org/book/dojo-1-1-release-notes http://www.securityfocus.com/bid/34661 https://exchange.xforce.ibmcloud.com/vulnerabilities/49883 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •