Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2704. PoCs published by Arshan Dabirsiaghi.
AI-analyzed exploit summary The provided text describes a security-bypass vulnerability in Computer Associates SiteMinder due to improper input validation, allowing XSS attacks via null byte injection. The example URL demonstrates how an attacker could bypass protections to execute arbitrary JavaScript.
Description
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).
Exploits (1)
The provided text describes a security-bypass vulnerability in Computer Associates SiteMinder due to improper input validation, allowing XSS attacks via null byte injection. The example URL demonstrates how an attacker could bypass protections to execute arbitrary JavaScript.