NetSight
IP …
medium4.3

CVE-2011-0533

Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 a…

Impact

Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.

Affected products

VendorProductAffected versions
ApacheContinuum
Versions 1.1, 1.2, 1.2.2, 1.2.3, 1.2.3.1, 1.3.6
ApacheArchiva
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1

Weakness classification

CWE-79

References