Unscored CVE-2009-0877 EUVD-2009-0874GHSA-wqx4-27xw-wwjw

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary we…

Published Mar 12, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field.

References

http://sosoblood.freehostia.com/SJSC/html_injection.gif
20090310 Sun Java System Communications Express [HTML Injection] mailing-list
34083 vdb-entry
52718 vdb-entry