CVE-2007-6306

Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.

Link	Resource
http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662	Exploit
http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662	Exploit
http://www.rapid7.com/advisories/R7-0031.jsp
http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680	Patch
http://www.securityfocus.com/bid/26752
http://secunia.com/advisories/27959	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0158.html
http://www.redhat.com/support/errata/RHSA-2008-0151.html
http://www.redhat.com/support/errata/RHSA-2008-0213.html
http://securityreason.com/securityalert/3430
http://www.redhat.com/support/errata/RHSA-2008-0261.html
http://secunia.com/advisories/31493
http://rhn.redhat.com/errata/RHSA-2008-0630.html
http://osvdb.org/41843
http://osvdb.org/41844
http://osvdb.org/41845
https://exchange.xforce.ibmcloud.com/vulnerabilities/38922
http://www.securityfocus.com/archive/1/484709/100/0/threaded

Configuration 1

cpe:2.3:o:jfree:jfreechart:1.0.8:*:*:*:*:*:*:*

---

Published : 2007-12-11 09:46

Updated : 2018-10-15 09:51

---

NVD link : CVE-2007-6306

Mitre link : CVE-2007-6306

No products.

CWE-79