SecuritySpace - CVE-2009-1275

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2009-1275

Description: Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross- site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.

Test IDs: 1.3.6.1.4.1.25623.1.0.900496

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2009-1275
BugTraq ID: 34657
http://www.securityfocus.com/bid/34657

CVE ID:	CVE-2009-1275
Description:	Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross- site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.
Test IDs:	1.3.6.1.4.1.25623.1.0.900496
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1275 BugTraq ID: 34657 http://www.securityfocus.com/bid/34657