CVE-2008-2166

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Web Server
Vendor
CVE Published:
13 May 2008

Summary

Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.

References

http://secunia.com/advisories/30133
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/29087
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2008/1455/references
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.