Unscored CVE-2008-0867 EUVD-2008-0874GHSA-fcg2-cvfp-6qwf

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 throu…

Published Feb 21, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

References

20080219 PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals mailing-list
BEA08-186.00 vendor-advisory
29040 third-party-advisory
ADV-2008-0610 vdb-entry
http://www.procheckup.com/Vulnerability_PR06-12.php
1019440 vdb-entry