CVE-2007-3101 | BDVDB-2026-24741 Detail
Description#
Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injected into Javascript that is sent to the client.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/25618
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34872
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=544
- http://osvdb.org/36377
- http://www.securityfocus.com/bid/24480
- http://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12312536&styleName=Text&projectId=12310272
- http://www.vupen.com/english/advisories/2007/2212
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.