exploits , vulnerabilities , articles , Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Title	Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability
Published	2008-01-22-12:00AM
Updated	2009-11-05-10:16PM
Class	Input Validation Error
CVE	CVE-2008-7220
Remote	Yes
Local	No
Credit	Reported by the vendor
Vulnerable	Sam Stephenson prototype javascript framework 1.4 Sam Stephenson prototype javascript framework 1.6.0.2 Asterisk Asterisk Business Edition C.3.1.0 Asterisk Asterisk Business Edition C.3.1 1 Asterisk Asterisk Business Edition C.2.4.3 Asterisk Asterisk Business Edition C.2.4.2 Asterisk Asterisk Business Edition C.2.3.3 Asterisk Asterisk Business Edition C.2.3 .2 Asterisk Asterisk Business Edition C.2.3 Asterisk Asterisk Business Edition C.2.1.2.1 Asterisk Asterisk Business Edition B.2.5.9 Asterisk Asterisk Business Edition B.2.5.8 Asterisk Asterisk Business Edition B.2.5.7 Asterisk Asterisk Business Edition B.2.5.6 Asterisk Asterisk Business Edition B.2.5.5 Asterisk Asterisk Business Edition B.2.5.4 Asterisk Asterisk Business Edition B.2.5.3 Asterisk Asterisk Business Edition B.2.5.2 Asterisk Asterisk Business Edition B.2.5.10 Asterisk Asterisk Business Edition B.2.5.1 Asterisk Asterisk 1.6.1 6 Asterisk Asterisk 1.6.1 5 Asterisk Asterisk 1.6.1 0rc2 Asterisk Asterisk 1.6.1 0rc1 Asterisk Asterisk 1.6.1 Asterisk Asterisk 1.6 beta6 Asterisk Asterisk 1.6 6 Asterisk Asterisk 1.6 14 Asterisk Asterisk 1.4.26 2 Asterisk Asterisk 1.4.26 1 Asterisk Asterisk 1.4.26 Asterisk Asterisk 1.4.24 .1 Asterisk Asterisk 1.4.24 Asterisk Asterisk 1.4.9 Asterisk Asterisk 1.4.8 Asterisk Asterisk 1.4.7 Asterisk Asterisk 1.4.6 Asterisk Asterisk 1.4.5 Asterisk Asterisk 1.4.4 Asterisk Asterisk 1.4.3 Asterisk Asterisk 1.6.1.8 Asterisk Asterisk 1.6.1.7 Asterisk Asterisk 1.6
Not Vulnerable	Asterisk Asterisk Business Edition C.3.2 2 Asterisk Asterisk Business Edition C.2.4 5 Asterisk Asterisk Business Edition B.2.5 12 Asterisk Asterisk 1.6.1 9 Asterisk Asterisk 1.6 .17 Asterisk Asterisk 1.4.26 .3
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-11-20 IBM Rational Products Multiple Cross Site Scripting Vulnerabilities
2009-11-20 PHP Versions Prior to 5.3.1 Multiple Vulnerabilities
2009-11-19 MySQL MyISAM Table Symbolic Link Local Privilege Escalation Vulnerability
2009-11-19 Multiple Citrix Products Unspecified SSL/TLS Certificate Spoofing Vulnerability
2009-11-19 Drupal Node Hierarchy Module Node Title HTML Injection Vulnerability
2009-11-19 file CDF File Parsing Multiple Buffer Overflow Vulnerabilities
2009-11-19 WebKit Multiple Remote Code Execution, Denial of Service, and Information Disclosure Vulnerabilities
2009-11-19 Simplog Multiple Remote Vulnerabilities
1970-01-01 Bugzilla Bug Alias Information Disclosure Vulnerability