Unscored CVE-2008-2166 EUVD-2008-2163GHSA-j9xr-9m8x-542c

Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows r…

Published May 13, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.

References

30133 third-party-advisory
29087 vdb-entry
ADV-2008-1455 vdb-entry
231467 vendor-advisory
1019987 vdb-entry
javasystem-search-xss(42263) vdb-entry