CVE-2009-1553

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via unsanitized user input in the URL. The payload triggers an alert dialog, confirming the vulnerability.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via an unsanitized input parameter in the URL. The PoC triggers an alert dialog, proving arbitrary script execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via an unsanitized input parameter in the URL. The payload executes an alert dialog, proving arbitrary script execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via the URL parameter. The payload executes an alert dialog, confirming the vulnerability.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via the URL parameter. The payload triggers an alert dialog, proving arbitrary script execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via the URL parameter. The payload executes an alert dialog, proving arbitrary script execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via the 'name' parameter in a URL. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in GlassFish Enterprise Server 2.1 by injecting malicious JavaScript code via the 'name' parameter in the auditModuleEdit.jsf endpoint. The PoC uses a simple IMG tag with a JavaScript URI to trigger an alert, confirming the vulnerability.