Description
Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
References
- ADV-2008-1930 vdb-entry
- VU#305208 third-party-advisory
- 1020372 vdb-entry
- caucho-resin-file-xss(43367) vdb-entry
- 29948 vdb-entry
- 30845 third-party-advisory
- http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007