Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting (XSS).
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://code.google.com/webtoolkit/releases/release-notes-1.4.61.html | |
http://secunia.com/advisories/28122 | third party advisory vendor advisory |
http://www.securityfocus.com/bid/26915 | vdb entry patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/39117 | vdb entry |
http://www.vupen.com/english/advisories/2007/4248 | vdb entry |
http://www.osvdb.org/39232 | vdb entry |