CVE-2006-1548

Published: Mar 30, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.

Affected (1)

Products: Apache: Struts

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Struts	Up to 1.2.8

References (20)

http://issues.apache.org/bugzilla/show_bug.cgi?id=38749

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html

Source: secalert@redhat.com

http://secunia.com/advisories/19493

Source: secalert@redhat.com

http://secunia.com/advisories/20117

Source: secalert@redhat.com

http://securitytracker.com/id?1015856

Source: secalert@redhat.com

http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17342

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/1205

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/25614

Source: secalert@redhat.com

https://issues.apache.org/struts/browse/STR-2781

Source: secalert@redhat.com

http://issues.apache.org/bugzilla/show_bug.cgi?id=38749

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19493

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20117

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015856

Source: af854a3a-2127-422b-91ae-364da2661108

http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17342

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1205

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25614

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.apache.org/struts/browse/STR-2781

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.