exploits , vulnerabilities , articles , Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Title	Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability
Published	2008-01-22-12:00AM
Updated	2009-11-05-10:16PM
Class	Input Validation Error
CVE	CVE-2008-7220
Remote	Yes
Local	No
Credit	Reported by the vendor
Vulnerable	Sam Stephenson prototype javascript framework 1.4 Sam Stephenson prototype javascript framework 1.6.0.2 Asterisk Asterisk Business Edition C.3.1.0 Asterisk Asterisk Business Edition C.3.1 1 Asterisk Asterisk Business Edition C.2.4.3 Asterisk Asterisk Business Edition C.2.4.2 Asterisk Asterisk Business Edition C.2.3.3 Asterisk Asterisk Business Edition C.2.3 .2 Asterisk Asterisk Business Edition C.2.3 Asterisk Asterisk Business Edition C.2.1.2.1 Asterisk Asterisk Business Edition B.2.5.9 Asterisk Asterisk Business Edition B.2.5.8 Asterisk Asterisk Business Edition B.2.5.7 Asterisk Asterisk Business Edition B.2.5.6 Asterisk Asterisk Business Edition B.2.5.5 Asterisk Asterisk Business Edition B.2.5.4 Asterisk Asterisk Business Edition B.2.5.3 Asterisk Asterisk Business Edition B.2.5.2 Asterisk Asterisk Business Edition B.2.5.10 Asterisk Asterisk Business Edition B.2.5.1 Asterisk Asterisk 1.6.1 6 Asterisk Asterisk 1.6.1 5 Asterisk Asterisk 1.6.1 0rc2 Asterisk Asterisk 1.6.1 0rc1 Asterisk Asterisk 1.6.1 Asterisk Asterisk 1.6 beta6 Asterisk Asterisk 1.6 6 Asterisk Asterisk 1.6 14 Asterisk Asterisk 1.4.26 2 Asterisk Asterisk 1.4.26 1 Asterisk Asterisk 1.4.26 Asterisk Asterisk 1.4.24 .1 Asterisk Asterisk 1.4.24 Asterisk Asterisk 1.4.9 Asterisk Asterisk 1.4.8 Asterisk Asterisk 1.4.7 Asterisk Asterisk 1.4.6 Asterisk Asterisk 1.4.5 Asterisk Asterisk 1.4.4 Asterisk Asterisk 1.4.3 Asterisk Asterisk 1.6.1.8 Asterisk Asterisk 1.6.1.7 Asterisk Asterisk 1.6
Not Vulnerable	Asterisk Asterisk Business Edition C.3.2 2 Asterisk Asterisk Business Edition C.2.4 5 Asterisk Asterisk Business Edition B.2.5 12 Asterisk Asterisk 1.6.1 9 Asterisk Asterisk 1.6 .17 Asterisk Asterisk 1.4.26 .3
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-11-24 Subscribe to Comments WordPress Plugin Multiple Unspecified Input Validation Vulnerabilities
2009-11-24 RETIRED: Microsoft November 2009 Advance Notification Multiple Vulnerabilities
2009-11-24 Cacti Multiple HTML Injection Vulnerabilities
2009-11-24 Philippe Jounin Tftpd32 Connect Frame Denial Of Service Vulnerability
2009-11-24 Microsoft Internet Explorer PDF Generation Information Disclosure Vulnerability
2009-11-23 WordPress WP-Cumulus Plugin Cross-Site Scripting Vulnerability
2009-11-23 Fuctweb CapCC Plugin for WordPress CAPTCHA Security Bypass Vulnerability
2009-11-23 FireStats WordPress Plugin Multiple Cross Site Scripting and Authentication Bypass Vulnerabilities
2009-11-23 WP Contact Form WordPress Plugin Multiple HTML Injection Vulnerabilities
2009-11-23 WP Contact Form WordPress Plugin Security Bypass and Multiple HTML Injection Vulnerabilities