CVE-2013-4378

Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.

• emeric vernat javamelody (<= 1.46) • emeric vernat javamelody 1.6 • emeric vernat javamelody 1.7 • emeric vernat javamelody 1.8 • emeric vernat javamelody 1.9 • emeric vernat javamelody 1.10 • emeric vernat javamelody 1.11 • emeric vernat javamelody 1.12 • emeric vernat javamelody 1.13 • emeric vernat javamelody 1.14 • emeric vernat javamelody 1.15 • emeric vernat javamelody 1.16 • emeric vernat javamelody 1.17 • emeric vernat javamelody 1.18 • emeric vernat javamelody 1.19 • emeric vernat javamelody 1.20 • emeric vernat javamelody 1.21 • emeric vernat javamelody 1.22 • emeric vernat javamelody 1.23 • emeric vernat javamelody 1.24 • emeric vernat javamelody 1.25 • emeric vernat javamelody 1.26 • emeric vernat javamelody 1.27 • emeric vernat javamelody 1.28 • emeric vernat javamelody 1.29 • emeric vernat javamelody 1.30 • emeric vernat javamelody 1.31 • emeric vernat javamelody 1.32 • emeric vernat javamelody 1.32.1 • emeric vernat javamelody 1.33 • emeric vernat javamelody 1.34 • emeric vernat javamelody 1.35 • emeric vernat javamelody 1.36 • emeric vernat javamelody 1.37 • emeric vernat javamelody 1.38 • emeric vernat javamelody 1.39 • emeric vernat javamelody 1.40 • emeric vernat javamelody 1.41 • emeric vernat javamelody 1.42 • emeric vernat javamelody 1.43 • emeric vernat javamelody 1.44 • emeric vernat javamelody 1.45