Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://openwall.com/lists/oss-security/2011/01/06/16 | mailing-list x_refsource_MLIST |
| http://www.redhat.com/support/errata/RHSA-2011-0568.html | vendor-advisory x_refsource_REDHAT |
| http://openwall.com/lists/oss-security/2011/01/06/7 | mailing-list x_refsource_MLIST |
| http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html | vendor-advisory x_refsource_FEDORA |
| http://www.mandriva.com/security/advisories?name=MDVSA-2011:032 | vendor-advisory x_refsource_MANDRIVA |
| http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html | vendor-advisory x_refsource_FEDORA |
| http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/64833 | vdb-entry x_refsource_XF |
| https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582 | x_refsource_MISC |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://openwall.com/lists/oss-security/2011/01/06/16 | mailing-list x_refsource_MLIST x_transferred |
| http://www.redhat.com/support/errata/RHSA-2011-0568.html | vendor-advisory x_refsource_REDHAT x_transferred |
| http://openwall.com/lists/oss-security/2011/01/06/7 | mailing-list x_refsource_MLIST x_transferred |
| http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://www.mandriva.com/security/advisories?name=MDVSA-2011:032 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting | x_refsource_MISC x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/64833 | vdb-entry x_refsource_XF x_transferred |
| https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582 | x_refsource_MISC x_transferred |